Vulnerability (CVE)
GitLab released fixes on October 21 for CVE-2026-110264, a maximum-severity 10.0 flaw that could let an unauthenticated user run arbitrary code on self-managed servers through an integer overflow during compilation of a specially crafted regular...
Ruby released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, its built-in regular expression engine, which underlie four critical GitLab flaws patched between September 23 and October 21. GitLab found that a specially crafted pattern could...
The PHP Foundation released patches for two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, codenamed PHP2Shell, that could lead to unauthenticated remote code execution. Cloudflare said it detected millions of exploitation attempts...