The core maintenance team behind the Ruby programming language has released versions 4.0.9, 3.4.12, and 3.3.13. Specifically, these critical updates resolve severe vulnerabilities within the embedded Onigmo regular expression parsing engine. These underlying memory...
GitLab Patches a Maximum-Severity Flaw GitLab has fixed a critical vulnerability that, under certain conditions, lets attackers run arbitrary code on a server. They need no password and no user interaction. The flaw received...
A seemingly mundane feature designed for emailing issue tasks has proven to be alarmingly akin to a fully privileged account, belying its innocuous interface. Joe Leon from Aikido Security demonstrated that a private GitLab...
A critical GitLab vulnerability, bearing the maximum possible CVSS score of 10, has officially transitioned from a theoretical urgent update into a verified, real-world threat. The Cybersecurity and Infrastructure Security Agency (CISA) definitively confirmed...
Unmasking the Concealed Remote Code Execution Flaw A critical remote code execution (RCE) flaw in self-hosted GitLab installations lay concealed for nearly six weeks. Although GitLab patched the underlying vulnerability on June 10, the...
GitLab has released updates for its current product line, addressing a vulnerability that allows unauthenticated attackers to hijack user accounts via XSS attacks. “Today we are releasing versions 17.0.1, 16.11.3, and 16.10.6 for GitLab...
A critical zero-click vulnerability, CVE-2023-7028 (rated CVSS 10.0) has been discovered by researchers in over 5,300 instances of GitLab accessible from the internet. Although the issue has been rectified in the latest versions of...
