GitLab's top-score vulnerability, second time in 9 days. The version updated on 10/12 is also affected this time. 3 steps to check

Those who patched the "perfect score" vulnerability in GitLab on October 12th were included in another patch cycle just 9 ...
The Hacker News

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

GitLab fixed CVE-2026-90970, a 9.9 AI Gateway flaw that could let logged-in Duo Agent Platform users run commands on self-hosted gateways.

What is GitLab AI Gateway? Explaining its relationship with the Duo Agent Platform for engineers

IntroductionWhile keeping up with IT trends, I became curious about the term GitLab AI Gateway and decided to look into it.

PHP、GitLab、Node.js集中发布补丁 CISA新增6项遭利用漏洞

观点网讯：10月21日，多款主流开发工具与企业软件集中披露高危漏洞并发布修复补丁。 PHP官方发布补丁，修复两个无需账号密码即可远程控制服务器的漏洞，影响PHP 5.4到8.5.11的几乎所有版本。PHP 8.1及更早版本官方不再提供修复。 GitLab官方同日发布修复版本。自建GitLab从7.0版本起全部受影响，攻击者无需登录，只需提交一个精心构造的正则表达式，即可在服务器上执行任意代码。 L ...