#DevOps Security
All CosmicBytez Labs articles tagged #DevOps Security, across news, security advisories, how-to guides, and projects.
- Security
GitLab CVE-2026-97229 CVSS 10 CI/CD Regex RCE Added to CISA KEV
An integer overflow in GitLab's CI/CD regex handling allows code execution on the server. CISA confirmed exploitation on Oct 29; patch to 19.4.2 or 19.2.8.
- Security
GitLab EE Patches CVSS 9.9 Duo Chat Flaw Exposing Search Credentials
A crafted GraphQL subscription lets an authenticated Duo Chat user bypass serialization and steal Advanced Search credentials in GitLab EE.
- News
Over 8,300 Gitea Servers Still Vulnerable to Active Code Execution Attacks
Shadowserver finds 8,300+ exposed Gitea instances unpatched against CVE-2026-60004, a critical RCE flaw already deploying cryptominers.
- Security
CVE-2026-20896: Gitea Docker Image Authentication Bypass
All official Gitea Docker images through v1.26.2 ship with a wildcard trusted proxy setting that lets any unauthenticated attacker impersonate any user...
- Security
CVE-2026-22874: Gitea SSRF Filter Bypass Exposes Cloud Credentials
Gitea versions through 1.26.2 use an incomplete IP filter that allows authenticated users to reach AWS Instance Metadata, Azure WireServer, and...