Product
Onigmo
- First Reported
- Oct 21, 2026
- Latest Reported
- Oct 21, 2026
Reported Context (1)
- back is the part of GitLab that failed. The regular-expression compiler is Ruby's built-in engine, called Onigmo, which GitLab ships inside its own packages and patches in its own builds. A weakness in that engine is GitLab Fixes Critical Unauthenticated Code-Execution Flaw Affecting Releases Since 2014
CVE (4)
People (1)
Vendors (1)
Products (1)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.