GitLab's October 21, 2026 critical patch release fixes CVE-2026-110264, a CVSS 10.0 bug in every version since 7.0. How an Org-mode #+TODO: line overflows Onigmo's repeat IDs, which versions to install, why the fix lives in GitLab's bundled Ruby, what to grep in your logs, and a local test showing stock Ruby 4.0.6 is still unpatched.
