{"schema_version":"1","data":[{"id":19322,"advisory_id":"6c4e5dcd-b225-41bb-b5fe-5a0bd99e8db4","revision":1,"source_id":"ruby","source_url":"https://www.ruby-lang.org/en/news/2026/07/16/ruby-3-3-12-released/","source_published_at":"2026-07-16T05:08:11+00:00","published_at":"2026-10-25T02:53:23.538262+00:00","extraction_method":"llm","technologies":["erb","net-imap","ruby"],"cve_ids":["CVE-2026-41316","CVE-2026-42245","CVE-2026-42246","CVE-2026-42256","CVE-2026-42257","CVE-2026-42258","CVE-2026-47240","CVE-2026-47241","CVE-2026-47242"],"event_types":["patch"],"payload":{"kind":"patch","title":"Ruby 3.3.12 Released","summary":"Ruby 3.3.12 includes security fixes, including an ERB deserialization guard-bypass fix and security fixes in the updated net-imap gem.","evidence":"Ruby 3.3.12 has been released. This release includes security fixes.","products":[{"name":{"value":"Ruby","evidence":"Ruby 3.3.12 has been released."},"prerequisites":[],"fixed_versions":[{"value":"3.3.12","evidence":"Ruby 3.3.12 has been released."}],"affected_versions":[]},{"name":{"value":"erb","evidence":"This release updates the default gem erb to 4.0.3.1"},"prerequisites":[],"fixed_versions":[{"value":"4.0.3.1","evidence":"This release updates the default gem erb to 4.0.3.1"}],"affected_versions":[]},{"name":{"value":"net-imap","evidence":"the bundled gem net-imap to 0.4.25"},"prerequisites":[],"fixed_versions":[{"value":"0.4.25","evidence":"the bundled gem net-imap to 0.4.25"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2026-41316","evidence":"CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class"},{"value":"CVE-2026-42245","evidence":"The net-imap update fixes CVE-2026-42245"},{"value":"CVE-2026-42246","evidence":"CVE-2026-42245, CVE-2026-42246"},{"value":"CVE-2026-42256","evidence":"CVE-2026-42256"},{"value":"CVE-2026-42257","evidence":"CVE-2026-42257"},{"value":"CVE-2026-42258","evidence":"CVE-2026-42258"},{"value":"CVE-2026-47240","evidence":"CVE-2026-47240"},{"value":"CVE-2026-47241","evidence":"CVE-2026-47241"},{"value":"CVE-2026-47242","evidence":"CVE-2026-47242"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":19322,"next_before":19322}