GitLab security incident: attempted exploitation of CVE-2026-97229
Summary
Alpine Linux reports a security incident involving CVE-2026-97229 in GitLab. Attackers attempted exploitation on Oct 20-21; no confirmed compromise, but credentials were reset and the instance rebuilt. The vulnerability lies in Ruby's Onigmo regex engine, with fixes delivered via Ruby upgrades and GitLab patches; Alpine notes that packages were not tampered and provides upgrade guidance for Ruby versions 3.3.13+, 3.4.12, or 4.0.9+ and updated container images.