Roku moves developer repositories from GitHub to GitLab
Docs, samples, RSG 2.0 SDK software, and tooling now use the same names under gitlab.com/rokudev.
8
- Mentions · 7d1
- Mentions · 30d19
- All mentions36
- First seenAug 17, 2026
- Last mentioned6d ago
Timeline
36 articles · newest firstRuby posts regexp compilation fixes linked to GitLab CVEs
The October 23 oss-security note only links the ruby-lang.org announcement and lists no versions or CVE identifiers.
22
PoC Exploit Released for Critical GitLab RCE Vulnerability (CVE-2026-97229)
A public PoC shows critical GitLab CVE-2026-97229 can run commands after a project push.
78
Top 10 Best DevSecOps Platforms in 2026 [Ranked & Scored]
A 2026 ranking puts GitLab, GitHub Advanced Security, and Snyk atop DevSecOps platforms by developer fix rates.
22
AI-generated changes create review bottlenecks in software delivery
JetBrains finds most DevOps teams run CI/CD, while AI-generated changes slow code reviews.
34
October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero days
Microsoft's October Patch Tuesday fixes 1,407 CVEs, including an exploited Windows Shell Mark-of-the-Web bypass.
84
GitLab Patches Max-Severity Vulnerability CVE-2026-97229
GitLab patched CVE-2026-97229, a CVSS 10.0 unauthenticated remote code execution flaw in CI/CD handling.
78
GitLab patches a max-severity regex flaw alongside five high-severity bugs
GitLab patched unauthenticated CI/CD regex RCE CVE-2026-97229 (CVSS 10) and five high-severity flaws.
78
CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab
Rapid7 reproduced unauthenticated GitLab RCE CVE-2026-97229 (CVSS 10) and urges immediate patching.
84
CVE-2026-97229: Critical GitLab RCE
GitLab patched CVE-2026-97229, a CVSS 10.0 unauthenticated RCE in self-managed servers.
78
Critical GitLab Vulnerability Enables Arbitrary Code Execution Attacks on Servers
GitLab patched CVE-2026-97229, an unauthenticated CVSS 10.0 flaw enabling arbitrary code execution on servers.
80
2026-016: Critical Vulnerability in GitLab CE and EE
GitLab patches critical CVE-2026-97229 (CVSS 10.0) allowing unauthenticated RCE via CI/CD regex compiler, plus 23 other security issues in CE/EE versions.
78
5th October – Threat Intelligence Report
Check Point's weekly digest covers exploited Citrix and Cisco critical flaws, major breaches, and South African aviation ransomware.
65
CVE-2026-90970: GitLab AI Gateway RCE
GitLab patched CVE-2026-90970, a critical authenticated RCE in the self-hosted AI Gateway for Duo users.
66
CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed
GitLab patched CVE-2026-90970, letting authenticated Duo users execute commands on self-hosted AI Gateways.
66
IBM Brings Bob to Self-Hosted and Air-Gapped Environments: Agentic Software Development Without Moving Your Code
IBM made agentic coding platform Bob generally available for on-premises, sovereign-cloud, and air-gapped deployments.
48
Critical GitLab AI Gateway Flaw Lets Attackers Execute Arbitrary Commands
GitLab patched CVE-2026-90970, a CVSS 9.9 bug letting authenticated users execute commands on self-hosted AI Gateway.
67
Critical GitLab AI Gateway Vulnerability Enables Remote Code Execution Attacks
GitLab patched CVE-2026-90970, a CVSS 9.9 flaw letting authenticated Duo users execute commands on self-hosted AI Gateways.
72
GitLab security advisory (AV26-994)
Canadian Cyber Centre advisory urges administrators to patch GitLab AI Gateway flaws fixed in versions 19.2.4, 19.3.2, and 19.4.1.
20
Phishing Abuses RMM Tools for Persistent Access
Microsoft observed July 2026 phishing campaigns that installed MSP360 RMM and ScreenConnect for persistent access across industries.
71
Don't couple your Go code to GitHub
A Go blog argues developers should use custom domains so module imports are not locked to GitHub.
4
Critical GitLab Bugs Let Attackers Execute Code Through Malicious CI/CD Regex
GitLab patched two CVSS 9.9 flaws letting authenticated users execute code via malicious CI/CD regular expressions.
74
GitLab Outage
A Hacker News post points to GitLab's status page during an outage, without any stated security cause.
6
GitLab Email Token Lets Attackers Push Code to Main and Execute CI/CD Jobs
GitLab incoming email tokens can push code, open merge requests, and run CI/CD while bypassing IP allowlists.
71
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
A leaked GitLab incoming-email token lets outsiders commit code and run CI jobs as the account owner.
67
GitLab Email Feature Vulnerability Lets Attackers Push Code Into Private Repositories
Aikido says a leaked GitLab incoming-email token can push patches and trigger CI in victim projects.
66
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
GitLab user email addresses embed highly privileged tokens that could enable supply-chain attacks.
66
Rate limits on GitLab.com are changing
GitLab announces changes to rate limits on GitLab.com in a brief blog post; few details are available.
4
CISA Warns of GitLab Path Traversal Vulnerability Exploited in Attacks
CISA added actively exploited GitLab path traversal flaw CVE-2026-85706 (CVSS 10.0) to its KEV catalog, setting a September 14 federal patch deadline.
88
GitLab’s critical flaw is already drawing internet-wide probes
GitLab patches two critical flaws (CVE-2026-85706 CVSS 10.0, CVE-2026-87719) as WatchTowr observes internet-wide probing of the unauthenticated file-read bug.
78
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
GitLab patched CVE-2026-85706, a CVSS 10.0 unauthenticated path traversal enabling arbitrary file reads, already probed in the wild.
80
GitLab Vulnerability Exploited One Day After Disclosure
WatchTowr observed in-the-wild exploitation of critical GitLab path traversal CVE-2026-85706 one day after disclosure, letting unauthenticated attackers read arbitrary files.
85
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-85706, an actively exploited GitLab path traversal flaw, to its KEV Catalog, requiring federal agencies to prioritize patching.
72
GitLab Patches Critical Flaws Enabling Arbitrary File Read, Credential Theft and Remote Code Execution
GitLab patched a CVSS 10.0 path traversal (CVE-2026-85706) plus deserialization and buffer-overflow flaws, urging self-managed users to update immediately.
72
GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure
Unauthenticated attackers are actively exploiting GitLab CVE-2026-19478 (CVSS 9.4) to modify or delete public projects days after disclosure.
84
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
GitLab urgently patched CVE-2026-19478 (CVSS 9.4), a critical unauthenticated GraphQL flaw allowing modification or deletion of public projects on self-managed instances.
58
Related CVEs
by mentions- CVE-2026-9722918%10.0Unauthenticated RCE in GitLab CE/EE via CI/CD regex
- CVE-2026-8570697%10.0Unauthenticated Path Traversal Arbitrary File Read in GitLab CE/EE
- CVE-2026-9097017%9.9Prompt sandbox escape to RCE in GitLab AI Gateway
- Authenticated GraphQL Subscription Flaw Leaks Search Credentials in GitLab EE
- CVE-2026-194786%9.1Unauthenticated GraphQL Code Injection in GitLab CE/EE Enables Data Tampering
- Stored XSS in GitLab CE/EE via syntax highlighting
- Improper Authorization in GitLab CE/EE Pipeline Creation
- Cache poisoning in GitLab CE/EE can leak CI/CD secrets
- CVE-2026-9695110%8.8Windows Shell command injection bypasses a security feature
- CVE-2026-19650<1%7.1CSRF Flaw in GitLab CE/EE GraphQL Lets GET Requests Execute Mutations
Appears with
- GitLabvendor · 28
- GitLab Community Editionproduct · 9
- GitLab Enterprise Editionproduct · 9
- GitLabproduct · 8
- GitLab Duoproduct · 6
- GitHuborganization · 5
- GitLab AI Gatewayproduct · 5
- GitLab EEproduct · 5
- GitLab CEproduct · 5
- Duo Agent Platformproduct · 4
- Microsoftorganization · 4
- watchTowrorganization · 3
- Aikido Securityorganization · 3
- watchTowrvendor · 3
- CISAorganization · 3
- IBMorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.