Malicious code in biundler-ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16658 Malicious code in biundler-ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bieundler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

tree-sitter-stack-graphs (>=0.3.0, <=0.6.0), tree-sitter-stack-graphs-java (>=0.0.1, <=0.2.0) +4 more potentially affected by unknown CVE via stack-graphs (>=0.10.2, <=0.14.1)

stack-graphs CARGO version =0.10.2, =0.3.0, =0.0.1, =0.0.1, =0.2.0 - tree-sitter-stack-graphs-python 0.0.1 - tree-sitter-stack-graphs-ruby 0.0.1 - tree-sitter-stack-graphs-typescript 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0303...

tree-sitter-stack-graphs (>=0.3.0, <=0.6.0), tree-sitter-stack-graphs-java (>=0.0.1, <=0.2.0) +4 more potentially affected by unknown CVE via stack-graphs (>=0.10.2, <=0.14.1)

stack-graphs CARGO version =0.10.2, =0.3.0, =0.0.1, =0.0.1, =0.2.0 - tree-sitter-stack-graphs-python 0.0.1 - tree-sitter-stack-graphs-ruby 0.0.1 - tree-sitter-stack-graphs-typescript 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0302...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2026-090111)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090111 advisory. An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocketreadnonblockrequestedsize, buffer, exception: false...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2023-002143)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002143 advisory. A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2026-090081)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090081 advisory. The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This i...

CVE-2026-94462: Authorization Bypass Through User-Controlled Key

Spree is an open source e-commerce solution built with Ruby on Rails. From 5.4.0 until 5.4.4 and 5.5.4, PATCH /api/v3/store/carts/:id/associate in Spree::Api::V3::Store::CartsControllerassociate uses findcartforassociation to locate a cart by prefixedid but does not require a cart token or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: emacs (UTSA-2023-000604)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000604 advisory. An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function has a local command injection vulnerability. The...

Debian dla-4787 : ruby-jwt - security update

The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4787 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4787-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 4787-1] ruby-jwt security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4787-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 18, 2026 https://wiki.debian.org/LTS -...

[SECURITY] Fedora 43 Update: ruby-3.4.10-32.fc43

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

CLEANSTART-2026-JW72308 Security fix for ghsa-j4pr-3wm6-xx2r applied in: logstash-fips 9.2.4-r1, logstash-fips 9.3.0-r1, ruby 3.4.9-r0

ghsa-j4pr-3wm6-xx2r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GD99974 Security fix for CVE-2026-33210 applied in: logstash-fips 9.2.4-r3, logstash-fips 9.2.5-r3, logstash-fips 9.2.6-r2, logstash-fips 9.3.0-r3, logstash-fips 9.3.1-r0, ruby 3.4.9-r1

CVE-2026-33210 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SF71798 Security fix for ghsa-75xq-5h9v-w6px applied in: ruby-fluentd-1.19 1.19.2-r2

Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FA36805 Security fix for ghsa-vcgp-9326-pqcp applied in: ruby-fluentd-1.19 1.19.2-r2

Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-MC27877 Security fix for ghsa-87pf-fpwv-p7m7 applied in: ruby-fluentd-1.19 1.19.2-r2

Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SU72949 Security fix for ghsa-hm49-wcqc-g2xg applied in: ruby-fluentd-1.19 1.19.2-r2

Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VQ04154 Security fix for ghsa-q2mw-fvj9-vvcw applied in: ruby-fluentd-1.19 1.19.2-r2

Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...