Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (1)
| Vulnerability |
Summary |
Aliases |
|
VCID-qabs-tqwy-fuar
|
ERB has an @_init deserialization guard bypass via def_module / def_method / def_class
ERB implements an @_init guard to prevent code execution when ERB
objects are reconstructed via Marshal.load on untrusted data. However,
ERB#def_method, ERB#def_module, and ERB#def_class evaluate the template
source without checking this guard, allowing an attacker who controls
the data passed to Marshal.load to bypass the protection and execute
arbitrary code. In particular, def_module takes no arguments, making
it straightforward to invoke as part of a deserialization gadget chain.
Please update to Ruby 4.0.3 which "only contains ERB 6.0.1.1,
which fixes CVE-2026-41316."
|
CVE-2026-41316
GHSA-q339-8rmv-2mhv
|