critical
CVE-2026-93577
ruby: integer overflow issue in regular expression compiler
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Bitnami10.0CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by Red Hat, Bitnami.
Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when compiling a specially crafted regular expression in a CI/CD configuration.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | gitlab | 19.2.7, 19.3.3, 19.4.1 |
| alpine 3.21 | ruby | 3.3.13-r0 |
| alpine 3.22 | ruby | 3.4.12-r0 |
| alpine 3.23 | ruby | 3.4.12-r0 |
| alpine 3.24 | ruby | 3.4.12-r0 |
| alpine edge | ruby | 3.4.12-r0 |
| chainguard | gitlab-runner-19.2, gitlab-runner-fips-19.2 | 19.2.6-r1 |
| debian 12 | ruby3.1 | no fix listed |
| debian 13 | ruby3.3 | no fix listed |
| debian 14 | ruby3.3 | no fix listed |
| echo | ruby3.1, ruby3.3 | no fix listed |
| minimos | gitlab-cng-19.2, gitlab-cng-19.3, gitlab-cng-19.4 and 10 more | 19.2.7-r0 and 2 more |
Show all 203 entries from 26 sources
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | gitlab | 19.2.7, 19.3.3, 19.4.1 |
| alpine 3.21 | ruby | 3.3.13-r0 |
| alpine 3.22 | ruby | 3.4.12-r0 |
| alpine 3.23 | ruby | 3.4.12-r0 |
| alpine 3.24 | ruby | 3.4.12-r0 |
| alpine edge | ruby | 3.4.12-r0 |
| chainguard | gitlab-runner-19.2 | 19.2.6-r1 |
| chainguard | gitlab-runner-fips-19.2 | 19.2.6-r1 |
| debian 12 | ruby3.1 | no fix listed |
| debian 13 | ruby3.3 | no fix listed |
| debian 14 | ruby3.3 | no fix listed |
| echo | ruby3.1 | no fix listed |
| echo | ruby3.3 | no fix listed |
| minimos | gitlab-cng-19.2 | 19.2.7-r0 |
| minimos | gitlab-cng-19.3 | 19.3.3-r0 |
| minimos | gitlab-cng-19.4 | 19.4.1-r0 |
| minimos | gitlab-cng-fips-19.2 | 19.2.7-r0 |
| minimos | gitlab-cng-fips-19.3 | 19.3.3-r0 |
| minimos | gitlab-cng-fips-19.4 | 19.4.1-r0 |
| minimos | gitlab-rails-19.2 | 19.2.7-r0 |
| minimos | gitlab-rails-19.3 | 19.3.3-r0 |
| minimos | gitlab-rails-19.4 | 19.4.1-r0 |
| minimos | gitlab-runner-19.3 | 19.3.3-r0 |
| minimos | gitlab-runner-19.4 | 19.4.1-r0 |
| minimos | gitlab-runner-fips-19.3 | 19.3.3-r0 |
| minimos | gitlab-runner-fips-19.4 | 19.4.1-r0 |
| rapidfort alma 10 | ruby | no fix listed |
| rapidfort alma 10 | ruby-bundled-gems | no fix listed |
| rapidfort alma 10 | ruby-default-gems | no fix listed |
| rapidfort alma 10 | ruby-devel | no fix listed |
| rapidfort alma 10 | ruby-doc | no fix listed |
| rapidfort alma 10 | ruby-libs | no fix listed |
| rapidfort alma 10 | ruby4.0 | no fix listed |
| rapidfort alma 10 | ruby4.0-devel | no fix listed |
| rapidfort alma 10 | ruby4.0-doc | no fix listed |
| rapidfort alma 10 | ruby4.0-rubygem-mysql2 | no fix listed |
| rapidfort alma 10 | ruby4.0-rubygem-pg | no fix listed |
| rapidfort alma 10 | rubygem-bigdecimal | no fix listed |
| rapidfort alma 10 | rubygem-bundler | no fix listed |
| rapidfort alma 10 | rubygem-io-console | no fix listed |
| rapidfort alma 10 | rubygem-irb | no fix listed |
| rapidfort alma 10 | rubygem-json | no fix listed |
| rapidfort alma 10 | rubygem-minitest | no fix listed |
| rapidfort alma 10 | rubygem-power_assert | no fix listed |
| rapidfort alma 10 | rubygem-psych | no fix listed |
| rapidfort alma 10 | rubygem-racc | no fix listed |
| rapidfort alma 10 | rubygem-rake | no fix listed |
| rapidfort alma 10 | rubygem-rbs | no fix listed |
| rapidfort alma 10 | rubygem-rdoc | no fix listed |
| rapidfort alma 10 | rubygem-rexml | no fix listed |
| rapidfort alma 10 | rubygem-rss | no fix listed |
| rapidfort alma 10 | rubygem-test-unit | no fix listed |
| rapidfort alma 10 | rubygem-typeprof | no fix listed |
| rapidfort alma 10 | rubygems | no fix listed |
| rapidfort alma 10 | rubygems-devel | no fix listed |
| rapidfort alma 9 | ruby | no fix listed |
| rapidfort alma 9 | ruby-default-gems | no fix listed |
| rapidfort alma 9 | ruby-devel | no fix listed |
| rapidfort alma 9 | ruby-doc | no fix listed |
| rapidfort alma 9 | ruby-libs | no fix listed |
| rapidfort alma 9 | rubygem-bigdecimal | no fix listed |
| rapidfort alma 9 | rubygem-bundler | no fix listed |
| rapidfort alma 9 | rubygem-io-console | no fix listed |
| rapidfort alma 9 | rubygem-irb | no fix listed |
| rapidfort alma 9 | rubygem-json | no fix listed |
| rapidfort alma 9 | rubygem-minitest | no fix listed |
| rapidfort alma 9 | rubygem-power_assert | no fix listed |
| rapidfort alma 9 | rubygem-psych | no fix listed |
| rapidfort alma 9 | rubygem-rake | no fix listed |
| rapidfort alma 9 | rubygem-rbs | no fix listed |
| rapidfort alma 9 | rubygem-rdoc | no fix listed |
| rapidfort alma 9 | rubygem-rexml | no fix listed |
| rapidfort alma 9 | rubygem-rss | no fix listed |
| rapidfort alma 9 | rubygem-test-unit | no fix listed |
| rapidfort alma 9 | rubygem-typeprof | no fix listed |
| rapidfort alma 9 | rubygems | no fix listed |
| rapidfort alma 9 | rubygems-devel | no fix listed |
| rapidfort amazon linux 2023 | ruby3.2 | no fix listed |
| rapidfort amazon linux 2023 | ruby3.4 | no fix listed |
| rapidfort amazon linux 2023 | ruby4.0 | no fix listed |
| rapidfort debian | rf-ruby3.3 | no fix listed |
| rapidfort debian 12 | rf-ruby3.3 | no fix listed |
| rapidfort debian 12 | ruby3.1 | 0:3.1.2-8.4 |
| rapidfort debian 12 | ruby3.3 | no fix listed |
| rapidfort debian 13 | rf-ruby3.3 | no fix listed |
| rapidfort debian 13 | ruby3.1 | 0:3.1.2-8.4 |
| rapidfort debian 13 | ruby3.3 | no fix listed |
| rapidfort Oracle Linux 10 | ruby | no fix listed |
| rapidfort Oracle Linux 10 | ruby-bundled-gems | no fix listed |
| rapidfort Oracle Linux 10 | ruby-default-gems | no fix listed |
| rapidfort Oracle Linux 10 | ruby-devel | no fix listed |
| rapidfort Oracle Linux 10 | ruby-libs | no fix listed |
| rapidfort Oracle Linux 10 | ruby4.0 | no fix listed |
| rapidfort Oracle Linux 10 | ruby4.0-devel | no fix listed |
| rapidfort Oracle Linux 10 | ruby4.0-rubygem-mysql2 | no fix listed |
| rapidfort Oracle Linux 10 | ruby4.0-rubygem-pg | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-bigdecimal | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-bundler | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-io-console | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-irb | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-json | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-minitest | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-power_assert | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-psych | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-racc | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-rake | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-rbs | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-rdoc | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-rexml | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-rss | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-test-unit | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-typeprof | no fix listed |
| rapidfort Oracle Linux 10 | rubygems | no fix listed |
| rapidfort Oracle Linux 10 | rubygems-devel | no fix listed |
| rapidfort Oracle Linux 9 | ruby | no fix listed |
| rapidfort Oracle Linux 9 | ruby-default-gems | no fix listed |
| rapidfort Oracle Linux 9 | ruby-devel | no fix listed |
| rapidfort Oracle Linux 9 | ruby-libs | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-bigdecimal | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-bundler | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-io-console | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-irb | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-json | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-minitest | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-power_assert | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-psych | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-rake | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-rbs | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-rdoc | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-rexml | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-rss | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-test-unit | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-typeprof | no fix listed |
| rapidfort Oracle Linux 9 | rubygems | no fix listed |
| rapidfort Oracle Linux 9 | rubygems-devel | no fix listed |
| rapidfort Red Hat 10 | ruby | no fix listed |
| rapidfort Red Hat 10 | ruby-bundled-gems | no fix listed |
| rapidfort Red Hat 10 | ruby-default-gems | no fix listed |
| rapidfort Red Hat 10 | ruby-devel | no fix listed |
| rapidfort Red Hat 10 | ruby-libs | no fix listed |
| rapidfort Red Hat 10 | ruby4.0 | no fix listed |
| rapidfort Red Hat 10 | ruby4.0-devel | no fix listed |
| rapidfort Red Hat 10 | ruby4.0-rubygem-mysql2 | no fix listed |
| rapidfort Red Hat 10 | ruby4.0-rubygem-pg | no fix listed |
| rapidfort Red Hat 10 | rubygem-bigdecimal | no fix listed |
| rapidfort Red Hat 10 | rubygem-bundler | no fix listed |
| rapidfort Red Hat 10 | rubygem-io-console | no fix listed |
| rapidfort Red Hat 10 | rubygem-irb | no fix listed |
| rapidfort Red Hat 10 | rubygem-json | no fix listed |
| rapidfort Red Hat 10 | rubygem-minitest | no fix listed |
| rapidfort Red Hat 10 | rubygem-power_assert | no fix listed |
| rapidfort Red Hat 10 | rubygem-psych | no fix listed |
| rapidfort Red Hat 10 | rubygem-rake | no fix listed |
| rapidfort Red Hat 10 | rubygem-rbs | no fix listed |
| rapidfort Red Hat 10 | rubygem-rdoc | no fix listed |
| rapidfort Red Hat 10 | rubygem-rexml | no fix listed |
| rapidfort Red Hat 10 | rubygem-rss | no fix listed |
| rapidfort Red Hat 10 | rubygem-test-unit | no fix listed |
| rapidfort Red Hat 10 | rubygem-typeprof | no fix listed |
| rapidfort Red Hat 10 | rubygems | no fix listed |
| rapidfort Red Hat 10 | rubygems-devel | no fix listed |
| rapidfort Red Hat 9 | ruby | no fix listed |
| rapidfort Red Hat 9 | ruby-default-gems | no fix listed |
| rapidfort Red Hat 9 | ruby-devel | no fix listed |
| rapidfort Red Hat 9 | ruby-libs | no fix listed |
| rapidfort Red Hat 9 | rubygem-bigdecimal | no fix listed |
| rapidfort Red Hat 9 | rubygem-bundler | no fix listed |
| rapidfort Red Hat 9 | rubygem-io-console | no fix listed |
| rapidfort Red Hat 9 | rubygem-irb | no fix listed |
| rapidfort Red Hat 9 | rubygem-json | no fix listed |
| rapidfort Red Hat 9 | rubygem-minitest | no fix listed |
| rapidfort Red Hat 9 | rubygem-power_assert | no fix listed |
| rapidfort Red Hat 9 | rubygem-psych | no fix listed |
| rapidfort Red Hat 9 | rubygem-rake | no fix listed |
| rapidfort Red Hat 9 | rubygem-rbs | no fix listed |
| rapidfort Red Hat 9 | rubygem-rdoc | no fix listed |
| rapidfort Red Hat 9 | rubygem-rexml | no fix listed |
| rapidfort Red Hat 9 | rubygem-rss | no fix listed |
| rapidfort Red Hat 9 | rubygem-test-unit | no fix listed |
| rapidfort Red Hat 9 | rubygem-typeprof | no fix listed |
| rapidfort Red Hat 9 | rubygems | no fix listed |
| rapidfort Red Hat 9 | rubygems-devel | no fix listed |
| rapidfort rocky 10 | ruby | no fix listed |
| rapidfort rocky 10 | ruby-devel | no fix listed |
| rapidfort rocky 10 | ruby-libs | no fix listed |
| rapidfort rocky 10 | rubygem-bigdecimal | no fix listed |
| rapidfort rocky 10 | rubygem-bundler | no fix listed |
| rapidfort rocky 10 | rubygem-io-console | no fix listed |
| rapidfort rocky 10 | rubygem-json | no fix listed |
| rapidfort rocky 10 | rubygem-psych | no fix listed |
| rapidfort rocky 10 | rubygem-rbs | no fix listed |
| rapidfort rocky 9 | ruby | no fix listed |
| rapidfort rocky 9 | ruby-devel | no fix listed |
| rapidfort rocky 9 | ruby-libs | no fix listed |
| rapidfort rocky 9 | rubygem-bigdecimal | no fix listed |
| rapidfort rocky 9 | rubygem-bundler | no fix listed |
| rapidfort rocky 9 | rubygem-io-console | no fix listed |
| rapidfort rocky 9 | rubygem-json | no fix listed |
| rapidfort rocky 9 | rubygem-psych | no fix listed |
| rapidfort rocky 9 | rubygem-rbs | no fix listed |
| rapidfort ubuntu | rf-ruby3.3 | no fix listed |
| rapidfort ubuntu | ruby3.3 | no fix listed |
| wolfi | gitlab-runner-19.2 | 19.2.6-r1 |
References
- https://access.redhat.com/security/cve/CVE-2026-93577
- https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/
- https://gitlab.com/gitlab-org/gitlab/-/work_items/629758
- https://hackerone.com/reports/3995696
- https://nvd.nist.gov/vuln/detail/CVE-2026-93577
- https://www.cve.org/CVERecord?id=CVE-2026-93577
- https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/