---
title: Severe vulnerability found in GitLab linked to Ruby
url: https://www.dataloco.com/en/severe-vulnerability-found-in-gitlab-linked-to-ruby
published: 2026-11-01T17:20:37+00:00
language: en
section: Security
source: https://www.security-next.com/192222
organizations: gitlab, ruby
publisher: Dataloco
---

# Severe vulnerability found in GitLab linked to Ruby

A serious vulnerability identified in the source code management platform GitLab, designated as CVE-2026-97229, has been traced back to the programming language Ruby. There are concerns that environments utilizing Ruby may also be affected, leading to a need for caution.

On October 8, 2026, GitLab released a fix for CVE-2026-97229, which stems from an integer overflow vulnerability related to regular expression processing in CI/CD configurations. This vulnerability has been rated with a maximum base score of 10.0 on the CVSSv3.1 scale, and subsequent exploitation has been confirmed.

The vulnerability has been confirmed to originate from issues within the Ruby programming language. The Ruby development team released an advisory on October 23, 2026, addressing the problem.

GitLab disclosed four vulnerabilities, all of which are rooted in flaws in the Ruby regular expression engine, Onigmo. In addition to CVE-2026-97229, these include CVE-2026-89078, which involves double freeing of memory during regular expression parsing, as well as CVE-2026-93577 and CVE-2026-110264, both related to integer overflow during compilation.

This vulnerability discovery highlights ongoing security challenges faced by popular programming frameworks and their dependencies.

## This story in other languages

- [Deutsch](https://www.dataloco.com/de/schwere-sicherheitsanfalligkeit-bei-gitlab-entdeckt-ursache-ist-ruby)
- [Français](https://www.dataloco.com/fr/une-vulnerabilite-exploitee-dans-gitlab-liee-a-ruby)
- [Polski](https://www.dataloco.com/pl/wykryto-powazna-podatnosc-w-gitlab-przyczyna-ruby)
- [Português (Brasil)](https://www.dataloco.com/pt-br/vulnerabilidade-grave-no-gitlab-atribuida-ao-ruby)