https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:27:42.842283+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:3821 ALSA-2023:3821 — Moderate: ruby:2.7 security, bug fix, and enhancement update 2026-10-03T11:27:42.868983+00:00

Affected: AlmaLinux:8: ruby, AlmaLinux:8: ruby-default-gems, AlmaLinux:8: ruby-devel, AlmaLinux:8: ruby-doc, AlmaLinux:8: ruby-libs, AlmaLinux:8: rubygem-abrt, AlmaLinux:8: rubygem-abrt-doc, AlmaLinux:8: rubygem-bigdecimal, AlmaLinux:8: rubygem-bson, AlmaLinux:8: rubygem-bson-doc and 21 more

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (2.7). (BZ#2189465)

Security Fix(es):

* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621) * ruby: ReDoS vulnerability in URI (CVE-2023-28755) * ruby: ReDoS vulnerability in Time (CVE-2023-28756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-03870 bdu:2023-03870 2026-10-03T11:27:42.869087+00:00 bdu:2023-03870 https://cve.radiocsirt.org/vuln/bell-cve-2023-28755 Withdrawn: BELL-CVE-2023-28755 — CVE-2023-28755 does not affect BellSoft software 2026-10-03T11:27:42.869104+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2025-avi-0622 certfr-2025-avi-0622 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq… 2026-10-03T11:27:42.869119+00:00 certfr-2025-avi-0622 https://cve.radiocsirt.org/vuln/cleanstart-2026-kx08240 CLEANSTART-2026-KX08240 — Security fix for CVE-2023-28755 applied in: ruby 3.1.4-r0 2026-10-03T11:27:42.869134+00:00

Affected: CleanStart: ruby

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-258972 EUVD-2026-258972 2026-10-03T11:27:42.869154+00:00 EUVD-2026-258972 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28755 fkie_cve-2023-28755 2026-10-03T11:27:42.869166+00:00

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

 https://cve.radiocsirt.org/vuln/ghsa-hv5j-3h9f-99c2 GHSA-hv5j-3h9f-99c2 — Ruby URI component ReDoS issue 2026-10-03T11:27:42.869188+00:00

Affected: RubyGems: uri

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

 https://cve.radiocsirt.org/vuln/gsd-2023-28755 gsd-2023-28755 2026-10-03T11:27:42.869209+00:00 gsd-2023-28755 https://cve.radiocsirt.org/vuln/oesa-2023-1226 OESA-2023-1226 — ruby security update 2026-10-03T11:27:42.869220+00:00

Affected: openEuler:20.03-LTS-SP1: ruby, openEuler:20.03-LTS-SP3: ruby, openEuler:22.03-LTS: ruby, openEuler:22.03-LTS-SP1: ruby

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl). Security Fix(es): A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.(CVE-2023-28756) A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.(CVE-2023-28755)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12828-1 openSUSE-SU-2024:12828-1 — libruby3_2-3_2-3.2.2-1.1 on GA media 2026-10-03T11:27:42.869247+00:00

libruby3_2-3_2-3.2.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:3291 RHSA-2023:3291 — Red Hat Security Advisory: rh-ruby27-ruby security, bug fix, and enhancement update 2026-10-03T11:27:42.869263+00:00

ruby/cgi-gem: HTTP response splitting in CGI ruby: ReDoS vulnerability in URI ruby: ReDoS vulnerability in Time

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28755 UBUNTU-CVE-2023-28755 2026-10-03T11:27:42.869282+00:00

Affected: Ubuntu:Pro:16.04:LTS: ruby2.3, Ubuntu:16.04:LTS: jruby, Ubuntu:18.04:LTS: ruby2.5, Ubuntu:18.04:LTS: jruby, Ubuntu:20.04:LTS: ruby2.7, Ubuntu:20.04:LTS: jruby, Ubuntu:22.04:LTS: ruby3.0, Ubuntu:22.04:LTS: rubygems, Ubuntu:24.04:LTS: jruby, Ubuntu:25.10: jruby and 1 more

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0814 WID-SEC-W-2023-0814 — Ruby: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T11:27:42.869311+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby ausnutzen, um einen Denial of Service Angriff durchzuführen.