Looks like Gitlab ships its own forked copy of the Ruby Onigmo regex engine.
Why? Is/was Ruby vulnerable?
Why? Is/was Ruby vulnerable?