{"id":"CVE-2026-89078","aliases":["ALPINE-CVE-2026-89078","ALSA-2026:96067","ALSA-2026:96068","ALSA-2026:96235","BELL-CVE-2026-89078","BIT-gitlab-2026-89078","DEBIAN-CVE-2026-89078","EUVD-2026-85736","GHSA-9chr-4x58-948m","RLSA-2026:96067","RLSA-2026:96068","RLSA-2026:96235","openSUSE-SU-2026:12252-1"],"status":"published","title":"Double Free in GitLab","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration.","severity":{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00522,"percentile":0.44615,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-415"],"published":"2026-09-23T23:05:20Z","modified":"2026-11-10T12:30:03Z","fixes":[{"ecosystem":"Alpine:v3.21","package":"ruby","fixed_in":["3.3.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ruby","fixed_in":["3.4.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ruby","fixed_in":["3.4.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ruby","fixed_in":["3.4.12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"ruby","fixed_in":["3.3.13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"ruby","fixed_in":["3.4.12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"ruby","fixed_in":["3.4.12-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"gitlab","fixed_in":["19.2.7","19.3.3","19.4.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ruby3.3","fixed_in":["3.3.13-0+deb13u1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.12-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.33-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.7-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.2-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.3-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.4.1-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.9-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.2-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.33-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.33-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-3.module_el9.7.0+184+e2e36072"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-3.module_el9.7.0+184+e2e36072"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-2.module_el9.7.0+245+447713a2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-2.module_el9.7.0+245+447713a2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.13-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.13-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.13-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.13-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.13-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.13-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.5-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.22-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.2-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.20.0-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-racc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.1.0-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3.1-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.9-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.22-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.22-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Alpaquita:23","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.2-r1"},{"fixed":"3.3.13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.4.4-r0"},{"fixed":"3.4.12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.2-r1"},{"fixed":"3.4.12-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"gitlab","ranges":[{"type":"SEMVER","events":[{"introduced":"19.2.0"},{"fixed":"19.2.7"},{"introduced":"19.3.0"},{"fixed":"19.3.3"},{"introduced":"19.4.0"},{"fixed":"19.4.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ruby3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2-7","3.1.2-7+deb12u1","3.1.2-7+hurd.1","3.1.2-8","3.1.2-8.1~exp1","3.1.2-8.3","3.1.2-8.4","3.1.2-8.5"]},{"source":"osv","ecosystem":"Debian:13","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.13-0+deb13u1"}]}],"versions":["3.3.8-2","3.3.8-2.1","3.3.8-2.2"]},{"source":"osv","ecosystem":"Debian:14","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.8-2","3.3.8-2.1","3.3.8-2.2"]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.7-170.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:9","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-3.module+el9.7.0+40032+36e56d0d"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:9","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-2.module+el9.7.0+40188+314ad260.0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:10","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.13-16.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ruby4.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-1.1"}]}],"bundled":2}],"products":[{"vendor":"gitlab","product":"gitlab"}],"references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/628577","tags":["Issue Tracking","report","web"]},{"url":"https://hackerone.com/reports/4019059","tags":["technical-description","exploit","permissions-required","Permissions Required","web","report"]},{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/","tags":["Release Notes","Vendor Advisory","advisory","web"]},{"url":"https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89078","tags":["web","advisory"]},{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released"},{"url":"https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves"},{"url":"https://github.com/advisories/GHSA-9chr-4x58-948m"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-89078","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:96067","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-110264","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-89078","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93577","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-97229","tags":["report"]},{"url":"https://bugzilla.redhat.com/2539836","tags":["report"]},{"url":"https://bugzilla.redhat.com/2539842","tags":["report"]},{"url":"https://bugzilla.redhat.com/2550153","tags":["report"]},{"url":"https://bugzilla.redhat.com/2558632","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-96067.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:96068","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-96068.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:96235","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-96235.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-89078","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89078.json","tags":["advisory"]},{"url":"git://git@gitlab.com:gitlab-org/gitlab.git","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-89078","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:96067","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2539836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2539842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558632","tags":["report"]},{"url":"https://errata.rockylinux.org/RLSA-2026:96068","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:96235","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97229","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-89078","title":"Double Free in GitLab","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration.","status":"published","published":"2026-09-23T23:05:20.132Z","modified":"2026-10-30T23:19:15.012Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical","assessor":"cna"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:19:55.526923Z"}],"euvd":[{"id":"EUVD-2026-85736","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration.","status":"published","published":"2026-09-23T23:05:20Z","modified":"2026-10-30T23:19:15Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T16:59:01.632804Z"}],"ghsa":[{"id":"GHSA-9chr-4x58-948m","title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19...","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration.","status":"published","published":"2026-09-24T00:30:26Z","modified":"2026-10-31T00:30:30Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T15:14:53.220001Z"}],"nvd":[{"id":"CVE-2026-89078","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration.","status":"published","published":"2026-09-24T00:17:22.06Z","modified":"2026-10-31T00:16:51.75Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical","assessor":"secondary"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:12:51.036099Z"}],"osv":[{"id":"ALPINE-CVE-2026-89078","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration.","status":"published","published":"2026-09-24T00:17:22.06Z","modified":"2026-10-27T12:30:03.218658685Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"BELL-CVE-2026-89078","status":"published","published":"2026-10-28T22:42:06.214253Z","modified":"2026-10-29T07:15:03.347399265Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:28:26.630331Z"},{"id":"CVE-2026-89078","title":"Double Free in GitLab","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration.","status":"published","published":"2026-09-23T23:05:20.132Z","modified":"2026-11-10T12:12:22.829399971Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical"}],"cwes":["CWE-415"],"updated_at":"2026-11-09T16:02:38.763385Z"},{"id":"DEBIAN-CVE-2026-89078","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration.","status":"published","published":"2026-09-24T00:17:22.06Z","modified":"2026-11-07T19:00:42.144824072Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-07T19:21:34.633914Z"},{"id":"RLSA-2026:96067","title":"Moderate: ruby security update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* ruby: double free issue in regular expression parser (CVE-2026-89078)\n\n* ruby: integer overflow issue in regular expression compiler (CVE-2026-93577)\n\n* ruby: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229)\n\n* ruby: integer overflow issue in regular expression compiler (CVE-2026-110264)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-11-10T12:04:52.928049Z","modified":"2026-11-10T12:30:02.479146368Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-10T12:59:04.624749Z"},{"id":"RLSA-2026:96068","title":"Moderate: ruby:3.3 security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* ruby: double free issue in regular expression parser (CVE-2026-89078)\n\n* ruby: integer overflow issue in regular expression compiler (CVE-2026-93577)\n\n* ruby: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229)\n\n* ruby: integer overflow issue in regular expression compiler (CVE-2026-110264)\n\nBug Fix(es) and Enhancement(s):\n\n* ruby:3.3/ruby: Rebase to the latest Ruby 3.3 release [rhel-9] (JIRA:Rocky Linux-290989)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-11-09T12:04:41.930864Z","modified":"2026-11-09T12:30:02.315495757Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-09T12:55:11.24816Z"},{"id":"RLSA-2026:96235","title":"Moderate: ruby security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* ruby: double free issue in regular expression parser (CVE-2026-89078)\n\n* ruby: integer overflow issue in regular expression compiler (CVE-2026-93577)\n\n* ruby: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229)\n\n* ruby: integer overflow issue in regular expression compiler (CVE-2026-110264)\n\nBug Fix(es) and Enhancement(s):\n\n* ruby: Rebase to the latest Ruby 3.3 release [rhel-10.2.z] (JIRA:Rocky Linux-300972)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-11-10T12:09:45.660151Z","modified":"2026-11-10T12:30:03.473148168Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-10T12:59:03.619613Z"},{"id":"ALSA-2026:96067","title":"Moderate: ruby security update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  \n\nSecurity Fix(es):  \n\n  * ruby: double free issue in regular expression parser (CVE-2026-89078)\n  * ruby: integer overflow issue in regular expression compiler (CVE-2026-93577)\n  * ruby: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229)\n  * ruby: integer overflow issue in regular expression compiler (CVE-2026-110264)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-11-09T00:00:00Z","modified":"2026-11-09T15:30:02.412092132Z","updated_at":"2026-11-09T16:02:40.565923Z"},{"id":"ALSA-2026:96068","title":"Moderate: ruby:3.3 security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  \n\nSecurity Fix(es):  \n\n  * ruby: double free issue in regular expression parser (CVE-2026-89078)\n  * ruby: integer overflow issue in regular expression compiler (CVE-2026-93577)\n  * ruby: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229)\n  * ruby: integer overflow issue in regular expression compiler (CVE-2026-110264)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * ruby:3.3/ruby: Rebase to the latest Ruby 3.3 release [rhel-9] (JIRA:RHEL-290989)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-11-09T00:00:00Z","modified":"2026-11-09T15:30:02.40886572Z","updated_at":"2026-11-09T16:02:40.565923Z"},{"id":"ALSA-2026:96235","title":"Moderate: ruby security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  \n\nSecurity Fix(es):  \n\n  * ruby: double free issue in regular expression parser (CVE-2026-89078)\n  * ruby: integer overflow issue in regular expression compiler (CVE-2026-93577)\n  * ruby: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229)\n  * ruby: integer overflow issue in regular expression compiler (CVE-2026-110264)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * ruby: Rebase to the latest Ruby 3.3 release [rhel-10.2.z] (JIRA:RHEL-300972)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-11-09T00:00:00Z","modified":"2026-11-10T12:00:02.385421197Z","updated_at":"2026-11-10T12:28:36.765058Z"},{"id":"BIT-gitlab-2026-89078","title":"Double Free in GitLab","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration.","status":"published","published":"2026-09-29T09:12:52.165Z","modified":"2026-10-01T10:00:04.668939137Z","updated_at":"2026-11-02T15:28:30.70064Z"},{"id":"openSUSE-SU-2026:12252-1","title":"libruby4_0-4_0-4.0.9-1.1 on GA media","description":"These are all security issues fixed in the libruby4_0-4_0-4.0.9-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-23T00:00:00Z","modified":"2026-10-24T17:23:11.385402527Z","updated_at":"2026-11-02T16:58:40.245664Z"}]}}