Update your fucking Ruby too!
https://x.com/TheHackersNews/status/2113691592301433276
Update your fucking GitLab too!
https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html
The Hacker NewsCritical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of ReleasesGitLab fixes CVE-2026-110264, a critical flaw that could allow unauthenticated code execution on self-managed versions dating back to 7.0.
X (formerly Twitter)The Hacker News (@TheHackersNews) on X‼️ FOUR critical GitLab RCE flaws traced back to just THREE bugs in Ruby's regex engine. Ruby has now fixed them, but this isn't just a GitLab issue. Other Ruby apps that compile attacker-controlled regex patterns are also affected. Details ➜ https://t.co/E4NxZyVZcq
commit 70148cd