4F404 Foundersin404-founders.com·Aug 21 · 3 min readGitLab CVE-2026-19478: Critical Flaw Under AttackGitLab shipped an emergency patch on August 17, 2026 for a critical code injection flaw in its GraphQL API that lets an unauthenticated attacker modify or delete public projects and user data. Researc00
MSManu Shuklainecorpit.hashnode.dev·Aug 20 · 13 min readGitLab 19.3 made credit usage caps GA on 20 August 2026 - a cap of 0 still spendsGitLab 19.3 made credit usage caps GA on 20 August 2026 - a cap of 0 still spends Summary. GitLab published its 19.3 release notes on 20 August 2026 and made GitLab Credits usage caps generally availa00
MSManu Shuklainecorpit.hashnode.dev·Aug 5 · 21 min readGitLab to GitHub migration in 2026: the 7 things GEI will not moveGitLab to GitHub migration in 2026: the 7 things GEI will not move Summary. GitHub made GitLab migrations generally available on 3 August 2026 through GitHub Enterprise Importer and a new gh gl2gh com00
OOnyiGlobal2025inonyiglobal2025.hashnode.dev·Aug 4 · 9 min readGitLab 403: "You Are Not Allowed to Push Code to This Project" — FixedContext: After a GitHub account suspension took my public repositories and portfolio offline, I set up GitLab as a mirror so my work stayed accessible during the appeal. What should have been a quick 00
HHugoinhugovalters.hashnode.dev·Jul 27 · 4 min readDeploying Encrypted DNS Internally: DoH and DoT GuideI was on-call when it happened. 3 AM on a Tuesday, and every single production server in our us-east-1 region started resolving api.internal.example.com to a server in Belarus. Our recursive DNS resol00
HHugoinhugovalters.hashnode.dev·Jul 27 · 3 min readNetwork Segmentation: VLANs and Firewall Rules for ProductionIntroduction: Why Your Flat Network is a Liability I once walked into a post-mortem where a single compromised WordPress plugin led to an attacker pivoting from a public web server to a PCI-compliant 00
HHugoinhugovalters.hashnode.dev·Jul 27 · 3 min readSSH Tunneling: The Swiss Army Knife of Networking You're Not UsingI recently watched a DevOps team spend three days arguing over the routing tables of a new WireGuard Site-to-Site tunnel. They just wanted to give a single developer access to a staging Prometheus das00
GAGujjar Apurvinapurv-gujjar.me·Jul 26 · 4 min readDay 6 : Variables, Secrets, Artifacts & Complete CI/CD Workflow Master GitLab CI/CD Variables, Secrets Management, Artifacts & Best Practices 📖 Introduction In the previous article, we learned how GitLab Runners execute CI/CD pipelines and how to configure Self-H00
NNavyainnavyakhannahashnodedev.hashnode.dev·Jul 22 · 6 min readLOG-7 Week 5: "Milestone 3 only"GNU Mailman Milestone 3 Work: Before writing the restore logic, I discovered a bug in the Milestone 2 export code- Mailman uses IMailingList.names() to list properties, but it was missing about 25 ra00
AYAkash Yadavinblog.akashy.com.np·Jun 25 · 4 min readHow I Automated Neon PostgreSQL Backups Using GitLab CI/CD (Without GitHub Actions)I wanted an automated way to back up my production database. Most tutorials use GitHub Actions, but my code is hosted on GitLab, so I decided to use GitLab CI/CD instead. In this guide, I'll show you 00
