AZL-111071

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111071.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-111071

Upstream

CVE-2026-110264

Published

2026-10-22T01:16:57Z

Modified

2026-10-27T05:36:16Z

Summary

CVE-2026-110264 affecting package ruby 3.3.5-10

Details

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-110264

Affected packages

Azure Linux:3 / ruby

Package

Name: ruby
Purl: pkg:rpm/azure-linux/ruby

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

3.3.5-10

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111071.json"