GitLab warns of max severity code execution security flaw

First reported 12 Oct, 13:09 UTCSource: BleepingComputerLast editorial activity 12 Oct, 13:09 UTC

Focused view of a computer screen displaying code and debug information. — Illustrative photo.Photo by Daniil Komov on Pexels

What happened

GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD (the automated pipeline that tests and ships code changes) Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances.

Sources & evidence

BleepingComputer Reporting source
GitLab warns of max severity code execution vulnerability ↗
https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/

What happened

Sources & evidence

Your privacy choice