CVE-2022-28738
Vulnerability in Ruby Lang
CVSS Skor
9.8
EPSS İhtimal
%3.0
Risk Skoru
0.3
Yayın
4 yıl önce
İlgili Siber Güvenlik Haberleri (Newsroom)
Bu zafiyetin basında ve siber güvenlik yayın organlarında yer aldığı makaleler ve analiz bültenleri:
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab found that a specially crafted pattern could corrupt memory while Ruby compiles it, potentially leading to code execution on its own servers. Ruby says any
İlgili Benzer Açıklar
8.3
CVE-2026-33210Ruby JSON has a format string injection vulnerability
Yama durumu bilinmiyorEPSS %1
5.8
CVE-2026-42258net-imap: Command Injection via unvalidated Symbol inputs
Yama durumu bilinmiyorEPSS %1
7.5
9.8
CVE-2026-42257Command injection in Ruby Lang Net\
Yama durumu bilinmiyorEPSS %1
8.1
6.5
CVE-2026-42256Resource allocation without limits in Ruby Lang Net\
Yama doğrulandıEPSS %1
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-28738"