CVE-2022-28738
Vulnerability in Ruby Lang
CVSS score
9.8
EPSS probability
%3.0
Risk score
0.3
Published
4 y ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab found that a specially crafted pattern could corrupt memory while Ruby compiles it, potentially leading to code execution on its own servers. Ruby says any
Similar Vulnerabilities
8.3
CVE-2026-33210Ruby JSON has a format string injection vulnerability
Patch status unknownEPSS %1
5.8
CVE-2026-42258net-imap: Command Injection via unvalidated Symbol inputs
Patch status unknownEPSS %1
7.5
9.8
CVE-2026-42257Command injection in Ruby Lang Net\
Patch status unknownEPSS %1
8.1
6.5
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-28738"