GitLab Security Incident: Attempted Exploitation of CVE-2026-97229
89 comments
- Points176
- Comments82
#13Rank now 1
#13Peak rank
1Days on list
132Score · 7d
Oct 29, 2026First seen
Rank · 7 days
On Hacker News
- Points
- 176
- Comments
- 82
- Submitted by
- sashk
- Posted
- Oct 28, 2026
- Site
- alpinelinux.org
Story details from Hacker News ↗ · linked article on alpinelinux.org.
Trending history
GitLab Security Incident: Attempted Exploitation of CVE-2026-97229 was first seen on Hacker News · Front page on Oct 29, 2026. Since then it has appeared in 46 checks on 1 different day. Its best position was #13 of 30, reached on Oct 29, 11:22 UTC. It is #13 right now, climbing from #14 to #13 over the last 6 checks. The same link also trended on Lobsters, which raises its cross-platform score.
Rank history
Position on Hacker News · Front page at every check (lower is better).
Last 14 days
Best rank per day (UTC).
13
Oct 16today
Metric history
points as reported by Hacker News.
Where it trended
| List | Best | Days | Checks | Last seen |
|---|---|---|---|---|
| Hacker News · Front page | #13 | 1 | 46 | |
| LLobsters · Hottest GitLab security incident: attempted exploitation of CVE-2026-97229 |… | same link | |||
From the discussion
A few top-level comments from Hacker News, shortened. Read the full thread on Hacker News.
> Upgrading to GitLab 19.3.6 on October 22 didn’t fix the vulnerability. The fix isn’t in GitLab’s own code but in a patch to Ruby, which GitLab applies only in its official packages. Our image used standard Ruby, so it didn’t get the patch. > The bug is in Ruby’s regular expression engine, so any program that…
The bug is integer overflow in a random C data-processing library (specifically regexes) leading to RCE. Who else is tired of C libraries since this week?
> If you use our alpinelinux/gitlab container image, pull alpinelinux/gitlab:19.3.6 again. The image published on October 27 contains Ruby 3.3.13. Any 19.3.6 image you pulled before October 27, and all older tags, are vulnerable. shouldn't they tag a new version instead of re-releasing a fixed 19.3.6, if earlier…
Questions
Is GitLab Security Incident: Attempted Exploitation of CVE-2026-97229 trending on Hacker News right now?
Yes. As of Oct 29, 11:22 UTC it is #13, climbing from #14 to #13 over the last 6 checks.
What is the highest rank GitLab Security Incident: Attempted Exploitation of CVE-2026-97229 reached?
#13 on Hacker News · Front page, on Oct 29, 11:22 UTC. Trendoday checks this list every 15 minutes.
How long has GitLab Security Incident: Attempted Exploitation of CVE-2026-97229 been trending?
It was first seen on Oct 29, 2026 and has been on the list on 1 day (46 checks) since.
How much discussion did it get on Hacker News?
176 points and 82 comments; submitted by sashk on Oct 28, 2026.