Alpine Linux rebuilt its GitLab server after an RCE exploit attempt and found that upgrading GitLab alone had left the Ruby flaw unpatched.

Exploit disclosure status: GitLab has confirmed the vulnerability, but the precise trigger, affected implementation, and RCE chain are not publicly documented as of 13 October 2026. This repository is ...