regexp[.]newDomain
Reported by 2 independent sources · first reported by Rapid7 · last reported
Last reported yesterday
What the reports say
2 reports, newest first · the exact sentence from each-
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws“That happens when a program passes such a string to Regexp[.]new, Regexp.union or Regexp.compile, or places it inside a pattern through interpolation, as in /#{input}/.”
-
Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)“The call at [1] supplies every filename in the selected commit, while compile_pattern at [2] ultimately invokes Regexp[.]new.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-97229, CVE-2026-110264
Thanks — we review every report.