Self-hosting GitLab? Alpine Linux shows the CVSS 10 regex fix also needs a Ruby update
Alpine Linux rebuilt its GitLab server from scratch and reset every password after an attacker probed CVE-2026-97229, a CVSS 10 flaw in the Ruby regex engine GitLab uses for CI configs. Alpine had upgraded GitLab, but its image lacked the Ruby patch. Fixed Ruby versions are 3.3.13, 3.4.12 and 4.0.9.










