Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

T1Covered by 1 source · first reported by Rapid7 at 16 Oct, 13:31 UTC

Overview On October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar. GitLab assigned it a CVSS score of 10.0 and described possible code execution by an…

releasessecurity

Sources

• T1Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Rapid716 Oct, 13:31

Vulnerabilities

• CVE-2026-97229