GitLab has released security updates for a maximum-severity vulnerability in its Regular Expression Compiler that could allow unauthenticated remote attackers to execute arbitrary code on vulnerable servers. The flaw, tracked as CVE-2026-110264, affects all versions of GitLab Community Edition and Enterprise Edition prior to the just-released patches, and the company has urged administrators to upgrade immediately.
company
GitLab
DevOps platform provider