Welcome to HowToShipIt — practical how-to guides for developers: code, AI tools, and servers, explained step by step.

GitLab Security Update (Oct 2026): Patch the CVSS 10.0 RCE Right Now

GitLab security update October 2026: patching the CVE-2026-97229 CVSS 10.0 RCE

This GitLab security update is not a routine patch. On October 12, 2026, GitLab shipped an emergency patch release for CVE-2026-97229, an integer overflow in the CI/CD regular expression compiler rated CVSS 10.0 — the highest possible score — that can let an unauthenticated attacker run arbitrary code on your GitLab server. If you run … Read more