A regular expression in a CI configuration is enough, and nobody has to log in
2026-10-13Security
GitLab shipped emergency patches for a flaw scored 10.0 in its CI/CD regular expression compiler, reachable without authentication. Self-managed installations are the exposed population — and sources disagree on which 19.3 release actually contains the fix.