Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple vulnerabilities were found in rubygems, which contains a package management framework for Ruby and a dependency manager for Ruby applications. CVE-202…
Two important security bugs have been found in Ruby. It was discovered that an HTTP response splitting flaw exists in the Ruby cgi gem before 0.1.0.2, 0.2.x be…
A couple of vulnerabilities were reported against ruby-git, a Ruby interface to the Git revision control system, that could lead to a command injection and exe…
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
An update that solves three vulnerabilities and has one errata is now available.
A vulnerability was discovered in ruby-oauth2, a Ruby library for OAuth 2.0, which could result in a bearer token being sent to the host named by a redirect Lo…
ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. JWT.decode(token, '', true, algorithm: 'HS256') accepts an attacker-forged tok…
Update rubygems to 4.0.20. Additionally, several security issues were found in resolv gem bundled in rubygems. This update resolves these issues by updating re…
Update rubygems to 4.0.20. Additionally, several security issues were found in resolv gem bundled in rubygems. This update resolves these issues by updating re…
Debian LTS Advisory DLA-4706-2 addresses a test failure in the ruby-grape package caused by a security fix in ruby-rack, recommending an upgrade for Debian 11 …
Oracle Linux 10 has released updates for various Ruby packages, addressing multiple security vulnerabilities related to CVEs, and improving overall functionali…
Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting the Ruby ecosystem after three malicious gems were pub…
Ruby 4.0.6 is released. This new ruby contains several security fixes in net- snmp.
Fedora released an update for rubygem-yard to version 0.9.40-2, addressing path traversal vulnerabilities and allowing users to generate consistent documentati…
Two vulnerabilities were discovered in ruby-rack, a modular Ruby webserver interface. CVE-2026-22860 Rack::Directory's path check used a string prefix match on…
A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service (DOS) by memory exhaustion. …
