Emergency security maintenance: GitLab critical patch (CVE-2026-97229) from 2026-10-12 16:52 CEST to 2026-10-12 17:16 CEST

All VSHN Managed GitLab instances have been upgraded to the latest patch release and are no longer affected by CVE-2026-97229.
No action is required on your side. If you notice any issues, please contact VSHN Support.

GitLab released a critical security patch on October 8, 2026 (versions 19.4.2, 19.3.4 and 19.2.8).

It fixes CVE-2026-97229, a critical vulnerability (CVSS 10.0) that could allow an unauthenticated attacker to execute arbitrary code on the GitLab server using a specially crafted regular expression in a CI/CD configuration.

Affected versions are 19.1 through 19.2.7, 19.3.0 through 19.3.3, and 19.4.0 through 19.4.1.

Given the severity, we are upgrading all managed GitLab instances to the latest patch release for their version line as an emergency maintenance, outside the regular maintenance windows.