GitLab fixes CVSS 10 flaw enabling unauthenticated code execution back to version 7.0
GitLab released critical patches for CVE-2026-110264, an integer overflow in its regex compiler that could let unauthenticated attackers run code on self-managed servers.