DDamiano Bianda23h ago · 6 min readGitLab Was Patched, the Server Was Still Vulnerable: CVE-2026-97229 Lives in RubyOn October 20, 2026, someone registered an account on Alpine Linux's public GitLab instance and started sending it crafted CI configurations. The instance crashed eight times over two days. Four of thdamianobianda.hashnode.dev
SsoftverseAdmin17h ago · 28 min readGitHub Actions vs GitLab CI vs Jenkins in 2026: Which CI/CD Tool Fits Your Team?By DevOps Enginer – CI/CD Series · Updated for 2026 Quick answer: If your code already lives on GitHub and you want CI/CD with almost no setup or maintenance, GitHub Actions is the default choice in 2devopsenginer.hashnode.dev
AAI Developer1d ago · 20 min readPHP2Shell + Fragnesia: The Chain That Turns a PHP Bug Into Root (and Why Django Teams Should Care)On October 29, 2026, CISA added a seven-month-old Linux kernel bug to its Known Exploited Vulnerabilities (KEV) catalog with an unusual note attached. The bug is CVE-2026-46300, nicknamed Fragnesia, aaidevpro.hashnode.dev
CCyber Knight1d ago · 6 min readThey Patched GitLab. The Bug Stayed.On 20 October, a brand-new account signed up to Alpine Linux's GitLab server and started probing it. Then the crafted CI configurations arrived, and GitLab's worker processes started crashing. Eight tnulltrace.hashnode.dev
WWaqas Shahid3d ago · 2 min readGitLab Explained: The Whole DevOps Lifecycle in One PlatformIntroduction A modern software team juggles many tools: Git hosting, issue tracking, code review, CI/CD pipelines (GitHub Actions), and security scanning, often from different vendors that barely talkpracticaldevblog.hashnode.dev
DDevGrid Staffing LLCOct 23 · 3 min readShould You Rerun That Flaky CI Job or Fix It?It's 4:40 PM and your merge request has a red X. You didn't touch the failing test. You click "retry," it goes green, and you merge. Next week the same test fails for someone else, and they do the samdevgridstaffing.hashnode.dev
CCiphemic academiaOct 23 · 12 min read GitHub vs. GitLab vs. Bitbucket: 100,000 Repos Moved in 24 Hours, and What Didn't Move With ThemGitHub vs. GitLab vs. Bitbucket: 100,000 Repos Moved in 24 Hours, and What Didn't Move With Them In June 2018, Microsoft announced it was buying GitHub for $7.5 billion in stock. Within hours, many opciphemicacademia.hashnode.dev
4404 FoundersOct 22 · 7 min readGitLab CVE-2026-110264: CVSS 10.0 RCE Hits 12 Years of ReleasesOne researcher found four Onigmo regex engine flaws in GitLab in a single month. The latest, CVE-2026-110264, could under certain conditions let an unauthenticated attacker execute arbitrary code on s1D404-founders.com
CCyber KnightOct 22 · 4 min readA CVSS 10.0 Bug Sat Inside GitLab for 12 Years. It Lived in the Regex Engine.Twelve years ago, somebody compiled a regular expression. Not in a browser. In a server-side library called Onigmo — the Ruby regex engine GitLab bundles — quietly turning patterns into executable mat1Dnulltrace.hashnode.dev
Jjaberadam2001Oct 16 · 9 min readBinary Search Debugging: Find the Bug in About 10 ChecksThere are 1,000 commits between the last build that worked and the one that doesn't. You can find the broken one in about 10 checks. Most of us spend an afternoon and don't. The reason isn't skill. Itsimplyexplained.hashnode.dev
