Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Important: ruby:2.5 security update
Important: ruby security update
Important: ruby:4.0 security update
Important: ruby:4.0 security update
Important: ruby:3.3 security update
Important: ruby:3.3 security update
Important: ruby:3.3 security update
Important: ruby:3.3 security update
Important: ruby:4.0 security update
Important: ruby:2.5 security update
Important: ruby:3.3 security update
Ruby could allow unintended access to network services.
MGASA-2025-0334 - Updated ruby-rack packages fix security vulnerabilities
Multiple security issues were found in Rack, an interface for developing web applications in Ruby, which could result in denial of service or proxy bypass.
Several security issues were fixed in RubyGems.
Several security issues were fixed in Ruby.
Cybersecurity researchers have disclosed three security flaws in the Rack Ruby web server interface that, if successfully exploited, could enable attackers to …
Upgrade to Ruby 3.3.8. CVE-2025-25186: Fix Net::IMAP vulnerable to possible DoS by memory exhaustion Resolves: rhbz#2345557 CVE-2025-27219: Denial of Service i…
An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfe…
Sinatra is an open source web framework for Ruby programming language. CVE-2022-29970
A vulnerability was discovered in Nokogiri, an open source XML and HTML library for Ruby. An inefficient regular expression was susceptible to excessive backtr…
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may result in denial-of-service (DoS), information leak, and remot…
A vulnerability has been discovered in Ruby on Rails, which can lead to remote code execution via serialization of data.
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may result in information disclosure, denial of service or the exe…
