CVE-2026-47167

Vim has a code injection vulnerability in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) affecting builds with +ruby support prior to version 9.2.0496. A crafted step-definition regex pulled from .rb files under features// or stories/ / directories is embedded into a Ruby Kernel.eva...

CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

EUVD-2026-36280

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

CVE-2026-47167

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

CVE-2026-47167

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

CVE-2026-47242 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.4-rails, kube-fluentd-operator, ruby4.0-rails, ruby3.2-rails, kube-logging-operator, ruby3.3-rails, jruby...

CVE-2026-47241 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.4-rails, kube-fluentd-operator, ruby4.0-rails, ruby3.2-rails, kube-logging-operator, ruby3.3-rails, jruby...

GHSA-8P34-64R3-MWG8 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.4-rails, kube-fluentd-operator, ruby4.0-rails, ruby3.2-rails, kube-logging-operator, ruby3.3-rails, jruby...

GHSA-46Q3-7GV7-QMGG vulnerabilities

Vulnerabilities for packages: logstash, ruby3.4-rails, kube-fluentd-operator, ruby4.0-rails, ruby3.2-rails, kube-logging-operator, ruby3.3-rails, jruby...

GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.4-rails, kube-fluentd-operator, ruby4.0-rails, ruby3.2-rails, kube-logging-operator, ruby3.3-rails, jruby...

GHSA-8P34-64R3-MWG8 vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, kube-logging-operator, kube-fluentd-operator, ruby3.2-rails, ruby4.0-rails, jruby, ruby3.4-rails, truffleruby, logstash...

GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, kube-logging-operator, kube-fluentd-operator, ruby3.2-rails, ruby4.0-rails, jruby, ruby3.4-rails, truffleruby, logstash...

CVE-2026-47240 vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, kube-logging-operator, kube-fluentd-operator, ruby3.2-rails, ruby4.0-rails, jruby, ruby3.4-rails, truffleruby, logstash...

CVE-2026-47241 vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, kube-logging-operator, kube-fluentd-operator, ruby3.2-rails, ruby4.0-rails, jruby, ruby3.4-rails, truffleruby, logstash...

CVE-2026-47242 vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, kube-logging-operator, kube-fluentd-operator, ruby3.2-rails, ruby4.0-rails, jruby, ruby3.4-rails, truffleruby, logstash...

Vim code injection vulnerability

Vim is an open-source, cross-platform text editor developed by Vim developers. Prior to Vim 9.2.0496, there was a code injection vulnerability in the plugin for the cucumber file type. This vulnerability stemmed from the s:stepmatch function in the plugin, which, in Vim builds that support Ruby,...

PT-2026-48707

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0496 Description A code injection issue exists in the s:stepmatch function within the cucumber filetype plugin runtime/ftplugin/cucumber.vim for builds with +ruby support. Step-definition patterns read from .rb files ...

CVE-2026-47167: Improper Control of Generation of Code

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...