GitLab CI/CD Regex Parsing Double Free Code Execution Vulnerability

GitLab CE/EE has remediated a double free vulnerability that could allow an authenticated user to execute arbitrary code on the GitLab server.

The issue occurs when parsing a specially crafted regular expression in a CI/CD configuration.

• Affected versions: all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1.
• Exploitation requires certain conditions and an authenticated user.