CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Ruby — security advisories

8 advisorieslatest 2026-08-17⚡ RSS feed

Tracked Ruby products:

Ruby and Ruby on Rails webrick Ruby Rake

⚡ Watch Ruby

Get an email when a new Ruby advisory drops — max one per day, one-click unsubscribe.

[UPDATE] [medium] Ruby: Vulnerability allows Denial of Service

mediumCVE-2026-27820cert-bund2026-08-17

[NEW] [high] Ruby: Multiple vulnerabilities

highCVE-2026-41316 CVE-2026-42245 CVE-2026-42246 CVE-2026-42256cert-bund2026-08-17

[UPDATE] [high] Ruby and Ruby on Rails (erb gem): Vulnerability allows code execution

highCVE-2026-41316cert-bund2026-08-12

CVE-2020-8130: There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.

mediumCVSS 6.4CVE-2020-8130msrc2026-08-06

[UPDATE] [medium] Ruby: Vulnerability Allows Information Disclosure

mediumCVE-2025-61594cert-bund2026-08-04

[UPDATE] [medium] Ruby: Vulnerability enables Denial of Service

mediumCVE-2025-24294cert-bund2026-08-04

USN-8556-1: Ruby vulnerabilities

unknownCVE-2026-42258 CVE-2026-27820ubuntu2026-07-16

CVE-2026-38969: ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state, enabling request smuggling.

highCVSS 7.5CVE-2026-38969msrc2026-07-14