#cisa

CVE-2026-97229: CISA says GitLab max-severity RCE is exploited, patch to 19.4.2

CISA added GitLab's CVSS 10.0 CI/CD regex flaw to its exploited list with a 1 November deadline; fixed GitLab releases exist, but self-built installs also need a patched Ruby.