<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Gitlab on StackRef Whistle</title><link>https://whistle.stackref.com/tags/gitlab/</link><description>Recent content in Gitlab on StackRef Whistle</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Fri, 30 Oct 2026 08:00:00 -0400</lastBuildDate><atom:link href="https://whistle.stackref.com/tags/gitlab/index.xml" rel="self" type="application/rss+xml"/><item><title>The Whistle: Special Bulletin - GitLab's CI/CD regex RCE (CVE-2026-97229) joins CISA's KEV catalog</title><link>https://whistle.stackref.com/post/2026-10-30-cve-bulletin-gitlab-kev/</link><pubDate>Fri, 30 Oct 2026 08:00:00 -0400</pubDate><guid>https://whistle.stackref.com/post/2026-10-30-cve-bulletin-gitlab-kev/</guid><description>&lt;p&gt;Two Mondays ago this bug led our patch notes. This week CISA put it in the KEV catalog, Alpine disclosed how close the attackers got, and the fix turned out to be a Ruby build change a GitLab version string cannot prove.&lt;/p&gt;</description></item></channel></rss>