onigmo

GitLab CVSS 10 Regex RCE on CISA KEV After Alpine Attack

CISA's KEV now lists a CVSS 10 GitLab RCE hiding in Ruby's regex engine — and Alpine's near-miss shows why upgrading GitLab alone may not fix it.