Tag

#ruby

Guides

Regular expressions and untrusted input: ReDoS, regex engine bugs and CVE-2026-97229

Why a regex built from user input is dangerous: slow matching (ReDoS) is one risk, memory-corrupting compiler bugs like GitLab's CVE-2026-97229 are another, and what to do about both.

audiotale.net teamOct 29, 20267 min read

News

CVE-2026-97229: GitLab flaw hit Alpine's server, and patching GitLab alone was not enough

Alpine Linux says an attacker nearly exploited the CVSS 10.0 GitLab bug on its own server; the root cause is in Ruby, so self-built installs also need Ruby 3.3.13, 3.4.12 or 4.0.9.

audiotale.net teamOct 29, 20268 min read