Source: bleepingcomputer.com
GitLab has released security patches addressing a maximum-severity vulnerability in its Regular Expression Compiler component. The flaw allows remote attackers to execute arbitrary code on vulnerable GitLab servers without authentication. The vulnerability has been assigned the highest possible severity rating, indicating significant risk to organizations running unpatched GitLab instances. GitLab has urged administrators to apply the patches immediately. The issue affects GitLab's server-side processing and could be exploited remotely, making it a critical threat to DevOps pipelines and source code repositories hosted on GitLab infrastructure.
