82/100
An integer overflow in GitLab Community and Enterprise Edition can let an unauthenticated user execute code on the server through a crafted regular expression in a CI/CD configuration. Alpine Linux reported an exploitation attempt on its own GitLab server about a week after GitLab's fix, with no evidence it succeeded. Self-managed GitLab operators should update and check fixed versions in GitLab's advisory.