GitLab warns of max severity code execution vulnerability

CI is tricky, it's basically just a machine for remote code execution, and in order to minimize the amount of job runner time a bunch of implementations try to make the CI itself programmable, usually with a half-assed language expressible as YAML.

An integer overflow in a regex compiler leading to RCE sounds entertainingly subtle, but it looks like no details are available yet. Which regex compiler, I wonder? Surely they don’t have a bespoke one!