GitLab

Upgrading to GitLab 19.3.6 on October 22 did not fix CVE-2026-97229 on Alpine's GitLab, an attacker crashed workers eight times on October 21, and the team rebuilt from scratch and reset every password.

Alpine found no evidence the exploit succeeded but says logging gaps mean it cannot rule it out.

Forgejo and Codeberg kept coming up for people who want a lightweight forge they can host or use as a public service; GitLab was the answer for organizations that need a familiar enterprise-shaped platform.

The useful distinction was not hosted versus self-hosted. It was whether a team needs GitHub Actions and App integrations, or merely Git repositories with dependable CI.