https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:41:31.777892+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2011-avi-101 certa-2011-avi-101 — Deux vulnérabilités dans Ruby ont été corrigées. La première permet de contourner la politique de sécurité et la second… 2026-10-02T16:41:31.785414+00:00 certa-2011-avi-101 https://cve.radiocsirt.org/vuln/euvd-2026-114404 EUVD-2026-114404 2026-10-02T16:41:31.785454+00:00 EUVD-2026-114404 https://cve.radiocsirt.org/vuln/fkie_cve-2011-1005 fkie_cve-2011-1005 2026-10-02T16:41:31.785469+00:00

The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname.

 https://cve.radiocsirt.org/vuln/ghsa-h2rc-3ppq-6pjg GHSA-h2rc-3ppq-6pjg 2026-10-02T16:41:31.785496+00:00

The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname.

 https://cve.radiocsirt.org/vuln/gsd-2011-1005 gsd-2011-1005 2026-10-02T16:41:31.785511+00:00 gsd-2011-1005 https://cve.radiocsirt.org/vuln/rhsa-2011:0908 RHSA-2011:0908 — Red Hat Security Advisory: ruby security update 2026-10-02T16:41:31.785522+00:00

ruby WEBrick log escape sequence Ruby WEBrick javascript injection flaw ruby: memory corruption in BigDecimal on 64bit platforms Ruby: Untrusted codes able to modify arbitrary strings