Warning Against Vulnerabilities Exploited in Actual Attacks (GitLab Community Edition and Enterprise Edition)

Overview

The Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks.

Affected Parties

• GitLab Community Edition.
• GitLab Enterprise Edition.

Vulnerability Information

• CVE-2026-97229. – The vulnerability is an integer overflow or wraparound vulnerability.

Action Items

• Users of this product must update to the latest version. – Mitigation measures must be applied in accordance with the manufacturer’s instructions.
• Compliance with CISA BOD 26-04 guidelines on risk-based security update prioritization and forensic classification requirements is required. – BOD 26-04 guidelines must be applied to cloud services. – If no mitigations are available, use of the product must be discontinued.

Note

• CISA has included this vulnerability in its Known Exploited Vulnerabilities Catalog.