The Whistle: Special Bulletin - GitLab's CI/CD regex RCE (CVE-2026-97229) joins CISA's KEV catalog
Two Mondays ago this bug led our patch notes. This week CISA put it in the KEV catalog, Alpine disclosed how close the attackers got, and the fix turned out to be a Ruby build change a GitLab version string cannot prove.