Skip to content
Heist/ feed
UnratedFix available

Regexp compilation fixes related to GitLab CVEs

Type: patchSource: Ruby1 source record

Ruby releases 4.0.9, 3.4.12, and 3.3.13 fix bugs in Ruby’s regular expression engine that GitLab found could be used for attacks.

Announced Source revision 1
Original source ↗

ruby

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

We have released Ruby 4.0.9, 3.4.12 and 3.3.13. They fix several bugs in Ruby’s regular expression engine (Onigmo) that GitLab found could be used for...

Ruby

Ruby 4.0.9, 3.4.12 and 3.3.13
Affected versions
Not stated in this extraction
Fixed versions
4.0.9
Ruby 4.0.9, 3.4.12 and 3.3.13
3.4.12
Ruby 4.0.9, 3.4.12 and 3.3.13
3.3.13
Ruby 4.0.9, 3.4.12 and 3.3.13
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2026-89078
CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264
CVE-2026-93577
CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264
CVE-2026-97229
CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264
CVE-2026-110264
CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264

Publisher severity

No explicit severity was extracted.

Event
#19321 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement