Updated daily · official sources

Security Radar

Vulnerabilities (CVE) being actively exploited, according to the CISA KEV catalog, with CVSS severity and exploitation probability (EPSS).

38exploited in the last 30 days

15critical (CVSS ≥ 9)

0used in ransomware

1779in the KEV catalog

CVE-2026-97229 Critical · CVSS 10.0 added on 10/29/2026

GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

GitLab · Community Edition and Enterprise Edition · CWE-190

GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

Want to know if your environment is exposed?

We assess versions, access and integrations of your ERP and infrastructure and prioritize the fixes.

Talk to a specialist

Sources: CISA Known Exploited Vulnerabilities Catalog, NIST National Vulnerability Database and FIRST EPSS. Informational content; always follow the vendor advisory and fix.

This product uses the NVD API but is not endorsed or certified by the NVD.