[ruby]

October 24, 2026

• Ruby patched three Onigmo regex-engine memory bugs that underpin four critical GitLab RCEs — a double free and two integer overflows, fixed in 4.0.9, 3.4.12 and 3.3.13. Exposure requires compiling regex patterns from untrusted input (The Hacker News), the root cause behind the GitLab CVSS 10.0 flaw. · Vulnerabilities & Exploits

in PHP2Shell's Reliability Problem — and a Third, Unpatched PHP Bug

August 15, 2026

• Ruby 4.0 has a universal deserialization RCE gadget chain, disclosed by elttam (elttam, discussion). · Vulnerabilities & Exploits

in A Heavy Day for Exploit Research and In-the-Wild N-Days