GitLab patches unauthenticated code execution in its regex compiler Seven release branches receive the critical fix. Self-managed operators also need to account for database migrations and review detection guidance.