01
Security
GitLab patches maximum-severity code execution flaw in its regex compiler
Self-managed administrators on the affected releases need to upgrade, since over 2,700 Community Edition instances are publicly visible.
Self-managed administrators on the affected releases need to upgrade, since over 2,700 Community Edition instances are publicly visible.
The stable release broadens where the toolchain fits into existing workflows and adds more visibility for setup and Git hooks.
Self-managed GitLab users need to upgrade now to close a flaw that could let an unauthenticated attacker run code on their servers.
The update gives teams a longer-running agent workflow while adding tighter controls for AI usage and billing.
The fix closes a route to command execution in self-hosted AI Gateway setups, while GitLab-hosted customers were already protected.
Leaked project email addresses can be abused to act as a maintainer, creating issues and merge requests that bypass IP restrictions.