The GitLab 10/10 Flaw (CVE-2026-97229, GitLab2Shell): Why Updating GitLab Might Not Be Enough

One crafted regular expression in a CI/CD config can run code on a self-hosted GitLab server, no login needed. Alpine Linux updated and was still vulnerable. How to check, upgrade and verify.

Read more →

Node2Shell Explained: The Node.js Brotli Bug (CVE-2026-111497) and How to Patch It

A critical bug in the Brotli decoder built into Node.js lets attackers corrupt server memory without logging in. What it is, who is affected, and a live patch on a real Ubuntu server.

Read more →