GitLab’s CI Regex Compiler Is a CVSS 10.0 RCE, and CISA Just Put It on KEV
Crafted CI regex plus a UTF-8 path recompiles Onigmo into RCE as the git user. Patched October 12, KEV October 29, due November 1. self-managed boxes need 19.4.2.
CI/CD
Read Full News
Gheist Just Turned Stolen GitHub Tokens Into a Secret-Dumping Conveyor Belt
Stolen tokens, a sync-check workflow, secrets printed in base32 so GitHub masking cannot catch them. Over 13,500 planted branches. Private repos still bleed.