October 24, 2026
- Ruby patched three Onigmo regex-engine memory bugs that underpin four critical GitLab RCEs — a double free and two integer overflows, fixed in 4.0.9, 3.4.12 and 3.3.13. Exposure requires compiling regex patterns from untrusted input (The Hacker News), the root cause behind the GitLab CVSS 10.0 flaw. · Vulnerabilities & Exploits
in PHP2Shell's Reliability Problem — and a Third, Unpatched PHP Bug