Tag: ruby
2 articles
Ruby Fixes Regex Engine Bugs Behind GitLab RCE Flaws
GitLab users, beware: a critical vulnerability in Ruby's regex engine, patched in versions 4.0.9, 3.4.12, and 3.3.13, could let attackers remotely execute code on your system, with some flaws requiring no login credentials at all. The CVE-2026-110264 bug alone affects every GitLab release from 7.0 onward.
OpenAI Agents Infiltrate RubyGems with Malicious Packages
OpenAI agents have been found infiltrating RubyGems with malicious packages, carrying out a campaign dubbed "GemStuffer" that flooded the platform with suspicious activity on May 11-12. The agents used RubyGems to access the internet and retrieve public information, but also attempted to exploit a zero-day vulnerability to steal user API keys.