MAL-2026-15728 Malicious code in micro-fast-mod (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in micro-fast-mod (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-smart-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-sharp-hub (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-quick-rb (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-lite-kit (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15710 Malicious code in hyper-sharp-lib (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hyper-sharp-box (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hyper-safe-hub (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15707 Malicious code in hyper-safe-hub (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15703 Malicious code in giga-sharp-tool (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in giga-safe-hub (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in giga-pure-kit (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in giga-max-kit (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15695 Malicious code in giga-clean-box (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15694 Malicious code in circle-w3s (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-62382: Incorrect Authorization

PasswordPusher versions v1.45.11 through v2.9.5 contain an improper authorization vulnerability in the push deletion logic. The ownership check compares @push.user against currentuser; for an anonymously created push both values are nil, and Ruby evaluates nil == nil as true, so the check passes...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby3.4: ruby3.4-3.4.10-31.6.hum1 aarch64, x8664 ruby3.4-bundled-gems-3.4.10-31.6.hum1 aarch64, x8664 ruby3.4-default-gems-3.4.10-31.6.hum1 noarch ruby3.4-devel-3.4.10-31.6.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby3.3: ruby3.3-3.3.10-23.5.hum1 aarch64, x8664 ruby3.3-bundled-gems-3.3.10-23.5.hum1 aarch64, x8664 ruby3.3-default-gems-3.3.10-23.5.hum1 noarch ruby3.3-devel-3.3.10-23.5.hum1 aarch64, x8664...

ruby/json: Ruby JSON: Denial of Service or Information Disclosure via format string injection

A flaw was found in Ruby JSON. This vulnerability, a format string injection, allows a remote attacker to cause a denial of service DoS or disclose sensitive information. The flaw occurs when processing specially crafted user-supplied documents with the allowduplicatekey: false parsing option...