CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Ruby — security advisories

2 advisorieslatest 2026-07-09⚡ RSS feed

Tracked Ruby products:

Ruby and Ruby on Rails webrick

⚡ Watch Ruby

Get an email when a new Ruby advisory drops — max one per day, one-click unsubscribe.

[UPDATE] [high] Ruby and Ruby on Rails (erb gem): Vulnerability allows code execution

highCVE-2026-41316cert-bund2026-07-09

CVE-2026-38969: ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state, enabling request smuggling.

highCVSS 7.5CVE-2026-38969msrc2026-07-02