critical
CVE-2026-97229
ruby: integer overflow issue in CI/CD regular expression compiler
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Bitnami10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by Red Hat, Bitnami.
Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | gitlab | 19.2.8, 19.3.5, 19.4.2 |
| alpine 3.24 | ruby | 3.4.12-r0 |
| alpine edge | ruby | 3.4.12-r0 |
| chainguard | gitlab-runner-19.4, gitlab-runner-fips-19.4, ruby-3.3 and 2 more | 19.4.2-r0 and 3 more |
| debian 12 | ruby3.1 | no fix listed |
| debian 13 | ruby3.3 | no fix listed |
| debian 14 | ruby3.3 | no fix listed |
| echo | ruby3.1, ruby3.3 | no fix listed |
| minimos | gitlab-cng-19.2, gitlab-cng-19.3, gitlab-cng-19.4 and 6 more | 19.2.8-r0 and 2 more |
| rapidfort alma 10 | ruby, ruby-bundled-gems, ruby-default-gems and 26 more | no fix listed |
| rapidfort alma 9 | ruby, ruby-default-gems, ruby-devel and 19 more | no fix listed |
| rapidfort amazon linux 2023 | ruby3.2, ruby3.4, ruby4.0 | no fix listed |
Show all 201 entries from 23 sources
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | gitlab | 19.2.8, 19.3.5, 19.4.2 |
| alpine 3.24 | ruby | 3.4.12-r0 |
| alpine edge | ruby | 3.4.12-r0 |
| chainguard | gitlab-runner-19.4 | 19.4.2-r0 |
| chainguard | gitlab-runner-fips-19.4 | 19.4.2-r0 |
| chainguard | ruby-3.3 | 3.3.12-r10 |
| chainguard | ruby-3.4 | 3.4.11-r5 |
| chainguard | ruby-4.0 | 4.0.7-r6 |
| debian 12 | ruby3.1 | no fix listed |
| debian 13 | ruby3.3 | no fix listed |
| debian 14 | ruby3.3 | no fix listed |
| echo | ruby3.1 | no fix listed |
| echo | ruby3.3 | no fix listed |
| minimos | gitlab-cng-19.2 | 19.2.8-r0 |
| minimos | gitlab-cng-19.3 | 19.3.5-r0 |
| minimos | gitlab-cng-19.4 | 19.4.2-r0 |
| minimos | gitlab-cng-fips-19.2 | 19.2.8-r0 |
| minimos | gitlab-cng-fips-19.3 | 19.3.5-r0 |
| minimos | gitlab-cng-fips-19.4 | 19.4.2-r0 |
| minimos | gitlab-rails-19.2 | 19.2.8-r0 |
| minimos | gitlab-rails-19.3 | 19.3.5-r0 |
| minimos | gitlab-rails-19.4 | 19.4.2-r0 |
| rapidfort alma 10 | ruby | no fix listed |
| rapidfort alma 10 | ruby-bundled-gems | no fix listed |
| rapidfort alma 10 | ruby-default-gems | no fix listed |
| rapidfort alma 10 | ruby-devel | no fix listed |
| rapidfort alma 10 | ruby-doc | no fix listed |
| rapidfort alma 10 | ruby-libs | no fix listed |
| rapidfort alma 10 | ruby4.0 | no fix listed |
| rapidfort alma 10 | ruby4.0-devel | no fix listed |
| rapidfort alma 10 | ruby4.0-doc | no fix listed |
| rapidfort alma 10 | ruby4.0-rubygem-mysql2 | no fix listed |
| rapidfort alma 10 | ruby4.0-rubygem-pg | no fix listed |
| rapidfort alma 10 | rubygem-bigdecimal | no fix listed |
| rapidfort alma 10 | rubygem-bundler | no fix listed |
| rapidfort alma 10 | rubygem-io-console | no fix listed |
| rapidfort alma 10 | rubygem-irb | no fix listed |
| rapidfort alma 10 | rubygem-json | no fix listed |
| rapidfort alma 10 | rubygem-minitest | no fix listed |
| rapidfort alma 10 | rubygem-power_assert | no fix listed |
| rapidfort alma 10 | rubygem-psych | no fix listed |
| rapidfort alma 10 | rubygem-racc | no fix listed |
| rapidfort alma 10 | rubygem-rake | no fix listed |
| rapidfort alma 10 | rubygem-rbs | no fix listed |
| rapidfort alma 10 | rubygem-rdoc | no fix listed |
| rapidfort alma 10 | rubygem-rexml | no fix listed |
| rapidfort alma 10 | rubygem-rss | no fix listed |
| rapidfort alma 10 | rubygem-test-unit | no fix listed |
| rapidfort alma 10 | rubygem-typeprof | no fix listed |
| rapidfort alma 10 | rubygems | no fix listed |
| rapidfort alma 10 | rubygems-devel | no fix listed |
| rapidfort alma 9 | ruby | no fix listed |
| rapidfort alma 9 | ruby-default-gems | no fix listed |
| rapidfort alma 9 | ruby-devel | no fix listed |
| rapidfort alma 9 | ruby-doc | no fix listed |
| rapidfort alma 9 | ruby-libs | no fix listed |
| rapidfort alma 9 | rubygem-bigdecimal | no fix listed |
| rapidfort alma 9 | rubygem-bundler | no fix listed |
| rapidfort alma 9 | rubygem-io-console | no fix listed |
| rapidfort alma 9 | rubygem-irb | no fix listed |
| rapidfort alma 9 | rubygem-json | no fix listed |
| rapidfort alma 9 | rubygem-minitest | no fix listed |
| rapidfort alma 9 | rubygem-power_assert | no fix listed |
| rapidfort alma 9 | rubygem-psych | no fix listed |
| rapidfort alma 9 | rubygem-rake | no fix listed |
| rapidfort alma 9 | rubygem-rbs | no fix listed |
| rapidfort alma 9 | rubygem-rdoc | no fix listed |
| rapidfort alma 9 | rubygem-rexml | no fix listed |
| rapidfort alma 9 | rubygem-rss | no fix listed |
| rapidfort alma 9 | rubygem-test-unit | no fix listed |
| rapidfort alma 9 | rubygem-typeprof | no fix listed |
| rapidfort alma 9 | rubygems | no fix listed |
| rapidfort alma 9 | rubygems-devel | no fix listed |
| rapidfort amazon linux 2023 | ruby3.2 | no fix listed |
| rapidfort amazon linux 2023 | ruby3.4 | no fix listed |
| rapidfort amazon linux 2023 | ruby4.0 | no fix listed |
| rapidfort debian | rf-ruby3.3 | no fix listed |
| rapidfort debian 12 | rf-ruby3.3 | no fix listed |
| rapidfort debian 12 | ruby3.1 | 0:3.1.2-8.4 |
| rapidfort debian 12 | ruby3.3 | no fix listed |
| rapidfort debian 13 | rf-ruby3.3 | no fix listed |
| rapidfort debian 13 | ruby3.1 | 0:3.1.2-8.4 |
| rapidfort debian 13 | ruby3.3 | no fix listed |
| rapidfort Oracle Linux 10 | ruby | no fix listed |
| rapidfort Oracle Linux 10 | ruby-bundled-gems | no fix listed |
| rapidfort Oracle Linux 10 | ruby-default-gems | no fix listed |
| rapidfort Oracle Linux 10 | ruby-devel | no fix listed |
| rapidfort Oracle Linux 10 | ruby-libs | no fix listed |
| rapidfort Oracle Linux 10 | ruby4.0 | no fix listed |
| rapidfort Oracle Linux 10 | ruby4.0-devel | no fix listed |
| rapidfort Oracle Linux 10 | ruby4.0-rubygem-mysql2 | no fix listed |
| rapidfort Oracle Linux 10 | ruby4.0-rubygem-pg | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-bigdecimal | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-bundler | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-io-console | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-irb | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-json | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-minitest | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-power_assert | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-psych | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-racc | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-rake | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-rbs | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-rdoc | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-rexml | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-rss | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-test-unit | no fix listed |
| rapidfort Oracle Linux 10 | rubygem-typeprof | no fix listed |
| rapidfort Oracle Linux 10 | rubygems | no fix listed |
| rapidfort Oracle Linux 10 | rubygems-devel | no fix listed |
| rapidfort Oracle Linux 9 | ruby | no fix listed |
| rapidfort Oracle Linux 9 | ruby-default-gems | no fix listed |
| rapidfort Oracle Linux 9 | ruby-devel | no fix listed |
| rapidfort Oracle Linux 9 | ruby-libs | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-bigdecimal | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-bundler | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-io-console | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-irb | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-json | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-minitest | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-power_assert | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-psych | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-rake | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-rbs | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-rdoc | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-rexml | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-rss | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-test-unit | no fix listed |
| rapidfort Oracle Linux 9 | rubygem-typeprof | no fix listed |
| rapidfort Oracle Linux 9 | rubygems | no fix listed |
| rapidfort Oracle Linux 9 | rubygems-devel | no fix listed |
| rapidfort Red Hat 10 | ruby | no fix listed |
| rapidfort Red Hat 10 | ruby-bundled-gems | no fix listed |
| rapidfort Red Hat 10 | ruby-default-gems | no fix listed |
| rapidfort Red Hat 10 | ruby-devel | no fix listed |
| rapidfort Red Hat 10 | ruby-libs | no fix listed |
| rapidfort Red Hat 10 | ruby4.0 | no fix listed |
| rapidfort Red Hat 10 | ruby4.0-devel | no fix listed |
| rapidfort Red Hat 10 | ruby4.0-rubygem-mysql2 | no fix listed |
| rapidfort Red Hat 10 | ruby4.0-rubygem-pg | no fix listed |
| rapidfort Red Hat 10 | rubygem-bigdecimal | no fix listed |
| rapidfort Red Hat 10 | rubygem-bundler | no fix listed |
| rapidfort Red Hat 10 | rubygem-io-console | no fix listed |
| rapidfort Red Hat 10 | rubygem-irb | no fix listed |
| rapidfort Red Hat 10 | rubygem-json | no fix listed |
| rapidfort Red Hat 10 | rubygem-minitest | no fix listed |
| rapidfort Red Hat 10 | rubygem-power_assert | no fix listed |
| rapidfort Red Hat 10 | rubygem-psych | no fix listed |
| rapidfort Red Hat 10 | rubygem-rake | no fix listed |
| rapidfort Red Hat 10 | rubygem-rbs | no fix listed |
| rapidfort Red Hat 10 | rubygem-rdoc | no fix listed |
| rapidfort Red Hat 10 | rubygem-rexml | no fix listed |
| rapidfort Red Hat 10 | rubygem-rss | no fix listed |
| rapidfort Red Hat 10 | rubygem-test-unit | no fix listed |
| rapidfort Red Hat 10 | rubygem-typeprof | no fix listed |
| rapidfort Red Hat 10 | rubygems | no fix listed |
| rapidfort Red Hat 10 | rubygems-devel | no fix listed |
| rapidfort Red Hat 9 | ruby | no fix listed |
| rapidfort Red Hat 9 | ruby-default-gems | no fix listed |
| rapidfort Red Hat 9 | ruby-devel | no fix listed |
| rapidfort Red Hat 9 | ruby-libs | no fix listed |
| rapidfort Red Hat 9 | rubygem-bigdecimal | no fix listed |
| rapidfort Red Hat 9 | rubygem-bundler | no fix listed |
| rapidfort Red Hat 9 | rubygem-io-console | no fix listed |
| rapidfort Red Hat 9 | rubygem-irb | no fix listed |
| rapidfort Red Hat 9 | rubygem-json | no fix listed |
| rapidfort Red Hat 9 | rubygem-minitest | no fix listed |
| rapidfort Red Hat 9 | rubygem-power_assert | no fix listed |
| rapidfort Red Hat 9 | rubygem-psych | no fix listed |
| rapidfort Red Hat 9 | rubygem-rake | no fix listed |
| rapidfort Red Hat 9 | rubygem-rbs | no fix listed |
| rapidfort Red Hat 9 | rubygem-rdoc | no fix listed |
| rapidfort Red Hat 9 | rubygem-rexml | no fix listed |
| rapidfort Red Hat 9 | rubygem-rss | no fix listed |
| rapidfort Red Hat 9 | rubygem-test-unit | no fix listed |
| rapidfort Red Hat 9 | rubygem-typeprof | no fix listed |
| rapidfort Red Hat 9 | rubygems | no fix listed |
| rapidfort Red Hat 9 | rubygems-devel | no fix listed |
| rapidfort rocky 10 | ruby | no fix listed |
| rapidfort rocky 10 | ruby-devel | no fix listed |
| rapidfort rocky 10 | ruby-libs | no fix listed |
| rapidfort rocky 10 | rubygem-bigdecimal | no fix listed |
| rapidfort rocky 10 | rubygem-bundler | no fix listed |
| rapidfort rocky 10 | rubygem-io-console | no fix listed |
| rapidfort rocky 10 | rubygem-json | no fix listed |
| rapidfort rocky 10 | rubygem-psych | no fix listed |
| rapidfort rocky 10 | rubygem-rbs | no fix listed |
| rapidfort rocky 9 | ruby | no fix listed |
| rapidfort rocky 9 | ruby-devel | no fix listed |
| rapidfort rocky 9 | ruby-libs | no fix listed |
| rapidfort rocky 9 | rubygem-bigdecimal | no fix listed |
| rapidfort rocky 9 | rubygem-bundler | no fix listed |
| rapidfort rocky 9 | rubygem-io-console | no fix listed |
| rapidfort rocky 9 | rubygem-json | no fix listed |
| rapidfort rocky 9 | rubygem-psych | no fix listed |
| rapidfort rocky 9 | rubygem-rbs | no fix listed |
| rapidfort ubuntu | rf-ruby3.3 | no fix listed |
| rapidfort ubuntu | ruby3.3 | no fix listed |
| wolfi | ruby-3.3 | 3.3.12-r10 |
| wolfi | ruby-3.4 | 3.4.11-r5 |
| wolfi | ruby-4.0 | 4.0.7-r6 |
References
- https://access.redhat.com/security/cve/CVE-2026-97229
- https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/
- https://gitlab.com/gitlab-org/gitlab/-/work_items/630686
- https://hackerone.com/reports/4055749
- https://hackerone.com/reports/4058589
- https://nvd.nist.gov/vuln/detail/CVE-2026-97229
- https://www.cve.org/CVERecord?id=CVE-2026-97229
- https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/