Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several vulnerabilities have been discovered in the interpreter for the Ruby language and the Rubygems included, which may result on result in XML roundtrip at…
A cookie prefix spoofing vulnerability in CGI::Cookie.parse and a regular expression denial of service vulnerability (ReDoS) on date parsing methods were disco…
Multiple vulnerabilites in ruby2.3, interpreter of object-oriented scripting language Ruby, were discovered. CVE-2021-31799
Updated ruby-em-http-request packages fix security vulnerability: A flaw was found in rubygem-em-http-request. The eventmachine library does not verify the hos…
Several vulnerabilities were fixed in JRuby, a 100% pure-Java implementation of Ruby. CVE-2017-17742
Updated ruby packages fix security vulnerability: An issue was discovered in Ruby through 2.5.7. If a victim calls BasicSocket#read_nonblock(requested_size, bu…
Updated ruby-rack packages fix security vulnerabilities: There's a possible information leak / session hijack vulnerability in Rack(RubyGem rack). Attackers ma…
Updated ruby packages fix security vulnerabilities: It was discovered that Ruby incorrectly handled certain files. An attacker could possibly use this issue t…
Important: ruby:2.5 security update
Multiple security vulnerabilities were discovered in Oj, a fast JSON parser and serializer for Ruby, which could result in denial of service or memory disclosu…
Important: ruby:4.0 security update
Important: ruby:3.3 security update
ruby:3.3 security update
Multiple security vulnerabilities were discovered in Oj, a fast JSON parser and serializer for Ruby, which could result in denial of service or memory disclosu…
A vulnerability has been discovered in Ruby, possibly allowing remote code execution.
Oracle Linux has released updated RPM packages for Ruby 3.3.12 and several related gems to address vulnerabilities associated with specific CVEs, ensuring enha…
Oracle Linux has released an update for Ruby 2.0.0 on version 7, addressing vulnerabilities CVE-2026-42246 and CVE-2026-42258, with various related packages av…
SUSE released an important security update for ruby2.5 addressing the CVE-2026-41316 vulnerability, applicable to several SUSE Linux Enterprise products. Insta…
Oracle Linux 9 has released updates for Ruby and related gems, addressing security vulnerabilities and resolving specific bugs, while providing packages for va…
Debian's security advisory addresses multiple vulnerabilities in ruby2.7, including Denial of Service, credential exposure, buffer overflow, and deserializatio…
Multiple vulnerabilities in ruby-rack can lead to denial of service, information disclosure, and potential request smuggling, with fixes available in updated v…
A significant Ruby security update for Rocky Linux 9 addresses vulnerabilities including IMAP command injection and TLS bypass, with two CVEs rated 7.1 and 7.4…
Ruby 3.4.10 is released. This new version contains severay security bug fixes in zlib, net-imap and erb..
Several security issues were fixed in Ruby.
