The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Important: ruby:2.5 security update
Important: ruby:3.3 security update
Important: ruby:3.3 security update
Important: ruby:3.3 security update
Important: ruby:3.3 security update
Important: ruby:3.3 security update
Important: ruby:3.3 security update
Important: ruby:3.3 security update
Important: ruby:3.3 security update
Important: ruby:3.3 security update
Ruby could allow unintended access to network services.
Important: ruby:3.3 security update
Important: ruby:2.5 security update
Ruby could allow unintended access to network services.
Fedora 44 has updated the rubygem-yard package to version 0.9.40, addressing path traversal issues by backporting fixes from versions 0.9.41 and 0.9.44.
ruby:4.0 security update
Ruby could be made to expose sensitive information.
Two security issues (cross-site scripting and directory traversal) were found in Rack, an interface for developing web applications in Ruby. For the oldstable …
MGASA-2025-0334 - Updated ruby-rack packages fix security vulnerabilities
Multiple security issues were found in Rack, an interface for developing web applications in Ruby, which could result in denial of service or proxy bypass.
Several security issues were fixed in RubyGems.
Several security issues were fixed in Ruby.
A fresh set of 60 malicious packages has been uncovered targeting the RubyGems ecosystem by posing as seemingly innocuous automation tools for social media, bl…
Several malicious packages have been uncovered across the npm, Python, and Ruby package repositories that drain funds from cryptocurrency wallets, erase entire…