As cited
Copy frozen at (site build).
vulnerabilities
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
An attacker attempted to exploit CVE-2026-97229, a critical GitLab vulnerability with a CVSS score of 10.0, against Alpine Linux's GitLab infrastructure approximately one week after GitLab released a fix. The flaw allows remote code execution (RCE) through a malicious regular expression in a continuous integration configuration. Alpine Linux reported no evidence of successful exploitation.
Why it matters: Alpine Linux and other organizations running GitLab are at risk from this maximum-severity flaw; patch immediately if not already done, and review logs for exploitation attempts in the week following GitLab's fix release.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
An attacker attempted to exploit CVE-2026-97229, a critical GitLab vulnerability with a CVSS 3.1 score of 10.0, against Alpine Linux's GitLab infrastructure approximately one week after a patch was released. The flaw allows remote code execution (RCE) through a malicious regular expression in a continuous integration configuration, though Alpine Linux found no indication the attack succeeded.
Why it matters: GitLab administrators and Alpine Linux users should verify their instances are patched, as this publicly documented flaw is being actively weaponized in the wild.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
An attacker attempted to exploit CVE-2026-97229, a critical GitLab vulnerability with a CVSS 3.1 score of 10.0, against Alpine Linux's GitLab infrastructure approximately one week after a patch was released. The flaw allows remote code execution (RCE) through a malicious regular expression in a continuous integration configuration, though Alpine Linux found no indication the attack succeeded.
Why it matters: GitLab administrators and Alpine Linux users should verify their instances are patched, as this publicly documented flaw is being actively weaponized in the wild.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
An attacker attempted to exploit CVE-2026-97229, a critical GitLab vulnerability with a CVSS 3.1 score of 10.0, against Alpine Linux's GitLab infrastructure approximately one week after a patch was released. The flaw allows remote code execution (RCE) through a malicious regular expression in a continuous integration configuration, though Alpine Linux found no indication the attack succeeded.
Why it matters: GitLab administrators and Alpine Linux users should verify their instances are patched, as this publicly documented flaw is being actively weaponized in the wild.
- Source published
- First seen by Cybersecurity Tracker