https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T00:53:07.349058+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-27282 CVE-2024-27282 2026-10-15T00:53:07.418011+00:00

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

 https://cve.radiocsirt.org/vuln/usn-6838-1 USN-6838-1 — ruby2.7, ruby3.0, ruby3.1, ruby3.2 vulnerabilities 2026-10-15T00:53:07.418063+00:00

Affected: Ubuntu:20.04:LTS: ruby2.7, Ubuntu:22.04:LTS: ruby3.0, Ubuntu:24.04:LTS: ruby3.2

It was discovered that Ruby RDoc incorrectly parsed certain YAML files. If a user or automated system were tricked into parsing a specially crafted .rdoc_options file, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2024-27281)

It was discovered that the Ruby regex compiler incorrectly handled certain memory operations. A remote attacker could possibly use this issue to obtain sensitive memory contents. (CVE-2024-27282)