We have published a report on a security incident on gitlab.alpinelinux.org. An attacker tried to exploit CVE-2026-97229. We found no evidence it succeeded but can't rule it out, so we rebuilt
GitLab from scratch.
Alpine packages and releases were not affected, and no signing keys were exposed.
All GitLab passwords have been reset. If you reused yours elsewhere, change it there.
https://alpinelinux.org/posts/GitLab-security-incident-CVE-2026-97229.html