← Back to events

ResolvedTechRelease

CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class

Ruby: 2 events in the last 90 days

What happened

We published security advisory for CVE-2026-41316.

Summary assembled by rule from the sources below

Why it's spreading

ConfirmedRuby Releases published a first-party announcement

Sources

Release

CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_classRuby Releases125 d ago