A CVSS 10.0 Bug Sat Inside GitLab for 12 Years. It Lived in the Regex Engine.

Twelve years ago, somebody compiled a regular expression. Not in a browser. In a server-side library called Onigmo — the Ruby regex engine GitLab bundles — quietly turning patterns into executable mat