CVE-2026-40897

CVE-2026-40897 Remote Code Execution in Math.js Expression Parser ★ CVE-2026-40897 Remote Code Execution in Math.js PoC ★ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 Overview CVE-2026-40897 is a Sandbox Bypass leading to Remote Code Execution vulnerability in...

CVE-2026-40897

CVE-2026-40897 Remote Code Execution in Math.js Expression Parser ★ CVE-2026-40897 Remote Code Execution in Math.js PoC ★ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 Overview CVE-2026-40897 is a Sandbox Bypass leading to Remote Code Execution vulnerability in...

Rocky Linux 10.2 [CIQ] Security Update: ruby / ruby-bundled-gems / ruby-bundled-gems-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_96235)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202696235 advisory. ruby: double free issue in regular expression parser CVE-2026-89078 ruby: integer overflow issue in regular expression compiler CVE-2026-93577 ruby:...

Rocky Linux 9 [CIQ] Security Update: ruby / ruby-debuginfo / ruby-debugsource / ruby-default-gems / etc Multiple Vulnerabilities (crlsa-2026_96067)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202696067 advisory. ruby: double free issue in regular expression parser CVE-2026-89078 ruby: integer overflow issue in regular expression compiler CVE-2026-93577 ruby: integ...

RLSA-2026:96235 Moderate: ruby security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: ruby: double free issue in regular expression parser CVE-2026-89078 ruby: integer overflow issue in regular expression compiler...

ruby security, bug fix, and enhancement update

An update is available for ruby. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is an extensible, interpreted, object-oriented, scripting language. It has...

RLSA-2026:96067 Moderate: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: ruby: double free issue in regular expression parser CVE-2026-89078 ruby: integer overflow issue in regular expression compiler...

ruby security update

An update is available for ruby. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is an extensible, interpreted, object-oriented, scripting language. It has...

RockyLinux 10 : ruby (RLSA-2026:96235)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:96235 advisory. ruby: double free issue in regular expression parser CVE-2026-89078 ruby: integer overflow issue in regular expression compiler CVE-2026-93577 ruby:...

Rocky Linux 9 [CIQ] Security Update: ruby / ruby-bundled-gems / ruby-bundled-gems-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_96068)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202696068 advisory. ruby: double free issue in regular expression parser CVE-2026-89078 ruby: integer overflow issue in regular expression compiler CVE-2026-93577 ruby: integ...

RockyLinux 9 : ruby (RLSA-2026:96067)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:96067 advisory. ruby: double free issue in regular expression parser CVE-2026-89078 ruby: integer overflow issue in regular expression compiler CVE-2026-93577 ruby:...

MiracleLinux 9 : ruby-3.0.7-170.el9_8 (AXSA:2026-2294:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2294:06 advisory. ruby: double free issue in regular expression parser CVE-2026-89078 ruby: integer overflow issue in regular expression compiler CVE-2026-93577 ruby:...

AlmaLinux 10 : ruby (ALSA-2026:96235)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:96235 advisory. ruby: double free issue in regular expression parser CVE-2026-89078 ruby: integer overflow issue in regular expression compiler CVE-2026-93577 ruby:...

ruby: double free issue in regular expression parser

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, a double free can occur when parsing a pattern that fails after an alternation. This double free causes memory...

Moderate: Red Hat Security Advisory: ruby security, bug fix, and enhancement update

An update for ruby is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

RLSA-2026:96068 Moderate: ruby:3.3 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: ruby: double free issue in regular expression parser CVE-2026-89078 ruby: integer overflow issue in regular expression compiler...

ruby:3.3 security, bug fix, and enhancement update

An update is available for module.rubygem-mysql2, module.ruby, rubygem-mysql2, ruby. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is an extensible,...

Moderate: Red Hat Security Advisory: ruby:3.3 security, bug fix, and enhancement update

An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

ruby: double free issue in regular expression parser

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, a double free can occur when parsing a pattern that fails after an alternation. This double free causes memory...

ruby: double free issue in regular expression parser

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, a double free can occur when parsing a pattern that fails after an alternation. This double free causes memory...