Ruby Archives • Daily CyberSecurity

Attackers Target Alpine Linux GitLab via CVE-2026-97229, a CVSS 10 RCE Flaw

GitLab vulnerability CVE-2026-97229 RCE exploitation attempt against Alpine Linux GitLab server, CVSS 10

Attackers Target Alpine Linux GitLab via CVE-2026-97229, a CVSS 10 RCE Flaw

Do Son October 28, 2026

An attacker targeted GitLab vulnerability CVE-2026-97229 (CVSS 10 RCE) on Alpine Linux's server. Alpine rebuilt GitLab and reset all passwords.

Ruby Fixes Onigmo Regex Bugs Behind Critical GitLab RCE Flaws Ruby security update fixes Onigmo regex flaws behind GitLab CVEs

Ruby Fixes Onigmo Regex Bugs Behind Critical GitLab RCE Flaws

Do Son October 26, 2026

Ruby security update 4.0.9, 3.4.12 and 3.3.13 fixes Onigmo regex bugs behind GitLab RCE flaws CVE-2026-110264 and CVE-2026-97229. Upgrade now.

Public PoC Exploits GitLab RCE via Two Oj Memory Corruption Bugs GitLab RCE proof-of-concept exploiting two Oj memory corruption bugs in the notebook diff renderer

GitLab RCE proof-of-concept exploiting two Oj memory corruption bugs in the notebook diff renderer

Public PoC Exploits GitLab RCE via Two Oj Memory Corruption Bugs

Do Son July 31, 2026

Public PoC exploits a GitLab RCE built from two Oj memory corruption bugs. See affected versions and patched GitLab releases to install now.

Rack Security Update: High-Severity Flaw Bypasses Parameter Limit, Exposing Apps to DoS Attacks Rack DoS Bypass, CVE-2025-59830

Rack Security Update: High-Severity Flaw Bypasses Parameter Limit, Exposing Apps to DoS Attacks

Do Son September 26, 2025

Rack patches CVE-2025-59830 (CVSS 7.5), a flaw where attackers could use semicolon separators to bypass the parameter count limit and trigger DoS attacks.

RubyGems Under Attack: 60 Malicious Packages Found Stealing Credentials from Grey-Hat Marketers Cemu emulator Linux malware Blitz Brigantine AOBackdoor GitHub Malware Campaign StealC Infostealer TamperedChef Malware, SEO Poisoning Carbanak malware RubyGems Supply Chain, Infostealer

Cemu emulator Linux malware Blitz Brigantine AOBackdoor GitHub Malware Campaign StealC Infostealer TamperedChef Malware, SEO Poisoning Carbanak malware RubyGems Supply Chain, Infostealer

RubyGems Under Attack: 60 Malicious Packages Found Stealing Credentials from Grey-Hat Marketers

Do Son August 8, 2025

Socket uncovers a long-running supply chain attack on RubyGems. A threat actor published 60 malicious gems stealing credentials from grey-hat marketers.

Critical JWE Ruby Flaw (CVE-2025-54887) Bypasses AES-GCM Authentication, Exposing Encrypted Data Ruby JWE, Authentication Tag Bypass

Critical JWE Ruby Flaw (CVE-2025-54887) Bypasses AES-GCM Authentication, Exposing Encrypted Data

Do Son August 8, 2025

A critical Ruby JWE vulnerability (CVE-2025-54887, CVSS 9.1) allows attackers to bypass authentication tag validation in AES-GCM, potentially leading to data decryption and integrity loss.

CVE-2025-27407 (CVSS 9.1): Critical GraphQL-Ruby Flaw Exposes Millions to RCE

Do Son March 16, 2025

Learn about CVE-2025-27407, a critical vulnerability in graphql-ruby that poses serious risks to applications using it.

CVE-2024-27281: Critical Vulnerability Patched in Popular Ruby Documentation Tool

Do Son March 29, 2024

The CVE-2024-27281 vulnerability could allow attackers to execute arbitrary code remotely on systems using affected versions of RDoc

CVE-2023-22794: RubyGems ActiveRecord SQL Injection Vulnerability

Do Son January 19, 2023

RubyGems ActiveRecord is vulnerable to SQL injection. Tracked as CVE-2023-22794, the flaw related to the sanitization of comments.