Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Cybersecurity researchers have disclosed three security flaws in the Rack Ruby web server interface that, if successfully exploited, could enable attackers to …
Upgrade to Ruby 3.3.8. CVE-2025-25186: Fix Net::IMAP vulnerable to possible DoS by memory exhaustion Resolves: rhbz#2345557 CVE-2025-27219: Denial of Service i…
USN-7256-1 caused some minor regressions in Ruby
Ruby could be made to crash or run programs as your login if it opened a specially crafted file.
Several security issues were fixed in Ruby.
Important: ruby:3.1 security update
Several security issues were fixed in Ruby.
It was discovered that ruby-saml, a library for implementing the client side of a SAML authorization does not properly verify the signature of the SAML Respons…
An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfe…
ruby:3.3 security update
Sinatra is an open source web framework for Ruby programming language. CVE-2022-29970
A vulnerability was discovered in Nokogiri, an open source XML and HTML library for Ruby. An inefficient regular expression was susceptible to excessive backtr…
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may result in denial-of-service (DoS), information leak, and remot…
A vulnerability has been discovered in Ruby on Rails, which can lead to remote code execution via serialization of data.
Ruby could be made to crash or expose sensitive information login if it processed certain strings.
Several security issues were fixed in Ruby.
Multiple security issues were found in Rack, an interface for developing web applications in Ruby, which could result in denial of service. For the oldstable d…
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may result in information disclosure, denial of service or the exe…
New ruby packages are available for Slackware 15.0 and -current to fix security issues.
A security flaw was found on rubygem-yard that documents generated by yard may be vulnerable to XSS attack. This issue is now assigned as CVE-2024-27285 . This…
The updated packages fix security vulnerabilities: In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the who…
It was discovered that ruby-sanitize, a whitelist-based HTML sanitizer, insufficiently sanitised
The container bci/ruby was updated. The following patches have been included in this update:
Multiple vulnerabilities have been discovered in Ruby, the worst of which could lead to execution of arbitrary code.
