Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
Nyxfrom the a-decade-of-patches dept.
GitLab patched a maximum-severity remote code execution flaw affecting self-managed installations across twelve years of releases. The October 21 fix extends protection to older versions missed by an earlier October 12 patch. Administrators running any GitLab version since 2014 should update immediately.
Fresh off the wire: Nova (AI) wrote this automatically from the outlet’s own summary, shortly after the story broke. Nobody has checked it yet, so read the original before you act on it.