CVE-2026-47167

Vim has a code injection vulnerability in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) affecting builds with +ruby support prior to version 9.2.0496. A crafted step-definition regex pulled from .rb files under features// or stories/ / directories is embedded into a Ruby Kernel.eva...

CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

EUVD-2026-36280

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

GHSA-8P34-64R3-MWG8 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rails, ruby3.4-rails, logstash, ruby3.3-rails, ruby4.0-rails, jruby, kube-logging-operator...

GHSA-46Q3-7GV7-QMGG vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rails, ruby3.4-rails, logstash, ruby3.3-rails, ruby4.0-rails, jruby, kube-logging-operator...

CVE-2026-47241 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rails, ruby3.4-rails, logstash, ruby3.3-rails, ruby4.0-rails, jruby, kube-logging-operator...

GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rails, ruby3.4-rails, logstash, ruby3.3-rails, ruby4.0-rails, jruby, kube-logging-operator...

CVE-2026-47242 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rails, ruby3.4-rails, logstash, ruby3.3-rails, ruby4.0-rails, jruby, kube-logging-operator...

CVE-2026-47240 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, gitlab-rails-ce, truffleruby, ruby3.3-rails, ruby4.0-rails, kube-logging-operator, jruby, logstash-fips, kube-fluentd-operator, logstash, ruby3.4-rails, gitlab-rails-ce-fips...

GHSA-8P34-64R3-MWG8 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, gitlab-rails-ce, truffleruby, ruby3.3-rails, ruby4.0-rails, kube-logging-operator, jruby, logstash-fips, kube-fluentd-operator, logstash, ruby3.4-rails, gitlab-rails-ce-fips...

CVE-2026-47242 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, gitlab-rails-ce, truffleruby, ruby3.3-rails, ruby4.0-rails, kube-logging-operator, jruby, logstash-fips, kube-fluentd-operator, logstash, ruby3.4-rails, gitlab-rails-ce-fips...

CVE-2026-47241 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, gitlab-rails-ce, truffleruby, ruby3.3-rails, ruby4.0-rails, kube-logging-operator, jruby, logstash-fips, kube-fluentd-operator, logstash, ruby3.4-rails, gitlab-rails-ce-fips...

GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, gitlab-rails-ce, truffleruby, ruby3.3-rails, ruby4.0-rails, kube-logging-operator, jruby, logstash-fips, kube-fluentd-operator, logstash, ruby3.4-rails, gitlab-rails-ce-fips...

Linux Distros Unpatched Vulnerability : CVE-2026-47167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin...

PT-2026-48707

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0496 Description A code injection issue exists in the s:stepmatch function within the cucumber filetype plugin runtime/ftplugin/cucumber.vim for builds with +ruby support. Step-definition patterns read from .rb files ...

Vim 代码注入漏洞

Vim is an open-source, cross-platform text editor developed by Vim developers. Prior to Vim 9.2.0496, there was a code injection vulnerability in the plugin for the cucumber file type. This vulnerability stemmed from the s:stepmatch function in the plugin, which, in Vim builds that support Ruby,...

Savon::Model evaluates WSDL operation names as Ruby source

Savon::Model generated SOAP operation methods by interpolating operation names into Ruby source passed to moduleeval. An attacker who can control the operation names of a WSDL, can inject Ruby code that executes in the application process. This affects only the .alloperations class method provide...

Security Bulletin: IBM Security Network Intrusion Prevention System can be affected by vulnerabilities in Ruby on Rails (CVE-2012-2660, CVE-2012-2694, CVE-2013-0156, CVE-2012-6496, CVE-2012-3424, and CVE-2012-2695)

Question Is the Network IPS system affected by Ruby on Rails vulnerabilities? "Product":"code":"SS9SBT","label":"Proventia Network Intrusion Prevention System","Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Component":"General...