CVE-2026-97229

Medienbericht

Exploit

EPSS 0.56%
Veröffentlicht 13.10.2026 01:05:46
Zuletzt bearbeitet 14.10.2026 13:55:26
Erkennungen
Login

Integer Overflow or Wraparound in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 12

NVD 6 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Gitlab ≫ GitLab SwEdition community Version >= 19.2.0 < 19.2.8

Gitlab ≫ GitLab SwEdition enterprise Version >= 19.2.0 < 19.2.8

Gitlab ≫ GitLab SwEdition community Version >= 19.3.0 < 19.3.5

Gitlab ≫ GitLab SwEdition enterprise Version >= 19.3.0 < 19.3.5

Gitlab ≫ GitLab SwEdition community Version >= 19.4.0 < 19.4.2

Gitlab ≫ GitLab SwEdition enterprise Version >= 19.4.0 < 19.4.2

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.56%	0.45

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
cve@gitlab.com	10	3.9	6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.