Ruby released versions 4.0.9, 3.4.12, and 3.3.13 to patch three severe vulnerabilities within the Onigmo regular expression engine. These flaws allowed memory corruption via crafted patterns during compilation, potentially resulting in remote code execution. The bugs were previously linked to four critical security issues patched by GitLab. Administrators should apply the updates immediately.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →