Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

The Hacker News - Oct 21, 2026

GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014. The fix matters even for administrators who patched nine days earlier: the October 12 update covered only versions 19.2 and later, and the new fixed versions sit one patch above it, so an

Read full article
More News
Elon Musk Says SpaceX and Tesla Are Exploring a Merger

Elon Musk Says SpaceX and Tesla Are Exploring a Merger

A deal would consolidate Elon Musk’s holdings in rockets, cars and artificial intelligence into a company worth well over $3 trillion.

Read more
Tesla signs deal to integrate Alipay into its cars as China competition heats up

Tesla signs deal to integrate Alipay into its cars as China competition heats up

Tesla has agreed a deal to integrate Chinese fintech giant Ant Group’s Alipay digital payment software into its vehicles in China, as Elon Musk’s firm steps up efforts to offer localised smart features amid intense competition in the Chinese market. The agreement, signed on Tuesday, will see Tesla roll out an Alipay-powered smart parking service across its Chinese fleet, according to the fintech firm. Neither side revealed a launch date or which car models would receive the feature, though...

Read more
Washington’s DeepSeek ban may deter US firms from adopting Chinese AI models: experts

Washington’s DeepSeek ban may deter US firms from adopting Chinese AI models: experts

The US government’s latest ban on Chinese artificial intelligence start-up DeepSeek could have a chilling effect on the wider American business community and deter companies from adopting low-cost Chinese AI models, industry experts say. The US Department of Homeland Security (DHS) ordered federal civilian agencies to remove DeepSeek products and third-party services built on the Chinese AI model from their IT systems, according to a directive signed in July and published on Monday. The...

Read more
How Jackdaw ignites row over climate and costs

How Jackdaw ignites row over climate and costs

How Jackdaw ignites arguments over climate and costs

Read more
Is this why the world's most mysterious text is yet to be cracked? 600-year-old Voynich manuscript may have been bound out of order, experts claim

Is this why the world's most mysterious text is yet to be cracked? 600-year-old Voynich manuscript may have been bound out of order, experts claim

Scientists claim that the real reason no one has ever managed to decipher the elusive text is that its pages have been bound out of order.

Read more
Why Drug Companies Are Rushing to Market Ketamine Medicines

Why Drug Companies Are Rushing to Market Ketamine Medicines

Spurred on by the Trump administration’s embrace of psychedelic medicine, researchers are experimenting with new — and not so new — forms of the anesthetic.

Read more
The household appliances that could spark a deadly fire: As coroner calls for tumble dryer sales ban, experts reveal the biggest risks in your home

The household appliances that could spark a deadly fire: As coroner calls for tumble dryer sales ban, experts reveal the biggest risks in your home

From your cosy electric blanket to the innocent-looking vacuum cleaner, common household appliances could spark deadly fires.

Read more
eMudhra intermediate CA certificates compromised: What happened, who is affected and what users need to know | Explained

eMudhra intermediate CA certificates compromised: What happened, who is affected and what users need to know | Explained

CERT-In has warned that eight eMudhra intermediate CA certificates were compromised due to weak cryptographic keys. Here's how fraudulent certificates could threaten encrypted communications and what users and website administrators should do.

Read more
Elon Musk's X to pay creators  ₹2.85 lakh for 15 videos in 30 days: Check eligibility, rules and deadline to enrol

Elon Musk's X to pay creators ₹2.85 lakh for 15 videos in 30 days: Check eligibility, rules and deadline to enrol

X is piloting an invite-only Video Kickstart Bonus that pays eligible creators a fixed $3,000 for regularly posting original videos. Details of the programme here. 

Read more
Is the iPhone Duo a gimmick or is time to join the foldable revolution? SHIVALI BEST tests Apple's £2,000 device to find out if two screens are really better than one

Is the iPhone Duo a gimmick or is time to join the foldable revolution? SHIVALI BEST tests Apple's £2,000 device to find out if two screens are really better than one

The device folds open like a book, transforming from a regular-sized smartphone into a mini tablet. But is it just a £2,000 gimmick, or is it finally time to embrace the dual-screen life?

Read more
How much gas could Jackdaw provide? And will it cut your energy bills?

How much gas could Jackdaw provide? And will it cut your energy bills?

BBC Verify looks at what the Jackdaw decision means for bills, energy security and the environment.

Read more
Astronaut surprise video leaves pupils starstruck

Astronaut surprise video leaves pupils starstruck

The surprise came after a teacher's father met Peake while working on a cruise ship.

Read more

About Us

Delivering news from all over the globe, StarJournal keeps you abreast with the greatest minds in science, be it researchers, theorists or even popularizers.