Live · 98 sources · updated 3m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Research

Threat intelligence and technical research from vendor labs, coordination centers and independent researchers.

Clear

2 matching records, 1 with confirmed exploitation.

  1. Research Rapid7

    CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab

    Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229 , an integer overflow or wraparound ( CWE-190 ) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and…

    Exploited CVSS 10.0 EPSS 0.27 Fix available CVE-2026-97229 GitLab Developer platform
  2. Research Rapid7

    Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

    Overview On October 12, 2026, GitLab released 19.4.2 , 19.3.5 , and 19.2.8 to fix CVE-2026-97229 , an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar . GitLab…

    CVSS 10.0 EPSS 0.27 CVE-2026-97229 GitLab Rapid7 Developer platform

Reuse this view

Same filters as JSON: /api/items?category=research&window=30d&vendor=GitLab&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help