At this point, security researchers are just making sure developers never get a proper night's sleep 💀
GitLab just dropped a CVSS 10.0 vulnerability (CVE-2026-110264). Potential unauthenticated RCE, and affected versions go all the way back to 2014.
12 years of hiding in the codebase. Bro had seniority.
Anyway, self-hosting GitLab? Patch it before the cat comes back.
commit ae3a6f4