GitLab
GitLab's 19.4.2 patch fixes a CVSS 10.0 remote code execution in the CI/CD regex compiler
An ad-hoc critical release shipped 24 security fixes on 2026-10-12. The headline is an unauthenticated remote code execution in the CI/CD regular-expression compiler, and two flaws in the GitLab Duo Agent Platform. Self-managed instances should upgrade now.