NewsThe Hacker News
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
More on GitLab
Other advisories
- CriticalCVE-2026-105458GitLab: Mehrere Schwachstellen
- HighCVE-2026-16255Incorrect Authorization in GitLab
- HighCVE-2026-15723Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
- LowCVE-2026-14288Use of Incorrectly-Resolved Name or Reference in GitLab
- MediumCVE-2026-13319Authorization Bypass Through User-Controlled Key in GitLab
- MediumCVE-2026-12664Incorrect Authorization in GitLab
- MediumCVE-2026-112378Use of Less Trusted Source in GitLab
- LowCVE-2026-112326Improper Cleanup on Thrown Exception in GitLab
Other news entries
- Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left OpenNewsThe Hacker News
- GitLab: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Schadcode-Attacken möglich: 12 Jahre alte Lücke gefährdet Gitlab-ServerNewsGolem.de — Security
- GitLab critical patches include one for a bug that allows code execution by unauthenticated usersNewsCSO Online
- ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 MoreNewsThe Hacker News
- Max-severity GitLab bug allows remote code execution over 12 years of releasesNewsThe Register — Security
- GitLab: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- GitLab warns of new max severity code execution vulnerabilityNewsBleepingComputer
Source: https://thehackernews.com/2026/10/ruby-fixes-three-regex-engine-bugs.html
ID