MAX-SEVERITY GITLAB VULNERABILITY EXPLOITED AGAINST ALPINE LINUX

Summary from the TLDR InfoSec newsletter

CVE-2026-97229, a CVSS 10 flaw in Ruby's Onigmo regex engine, lets unauthenticated attackers execute code through crafted GitLab CI/CD configurations. Attackers targeted Alpine Linux on October 20 to 21, crashed worker processes, and downloaded its container image. Alpine found no confirmed code execution or repository tampering, rebuilt the instance, and reset passwords. CISA added the bug to KEV. GitLab-only updates may be insufficient for custom Ruby deployments. Use Ruby 3.3.13, 3.4.12, 4.0.9, or later.