More than 1,000 internet-exposed GitLab servers remain unpatched against CVE-2026-97229, a maximum-severity integer overflow in the CI/CD Regular Expression Compiler that allows unauthenticated remote code execution. CISA added the flaw to its Known Exploited Vulnerabilities catalog and ordered federal agencies to secure servers by Sunday.