TI-2026-29917 CVE-2026-41316 · GHSA-q339-8rmv-2mhv
ERB has an @_init deserialization guard bypass via def_module / def_method / def_class
Priority MEDIUM 40
ERB is a templating system for Ruby.
RHSA-2026:33478
ruby security update
Released 2026-06-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) ruby-3.3.10-11.el10_0.1, ruby-bundled-gems-3.3.10-11.el10_0.1, ruby-default-gems-3.3.10-11.el10_0.1 +20
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) ruby-doc-3.3.10-11.el10_0.1