Exploit for CVE-2026-107360

CVE-2026-107360 — rubygem-safemode compound-assignment Jail al...

rubygem-smart_proxy_dynflow: Dynflow console authorizes any client certificate the capsule CA signed

An improper authentication vulnerability has been found in the task console in the smartproxydynflow package. The console accepts any client certificate signed by the capsule's certificate authority. It does not check the list of servers the capsule trusts. A low-privileged network attacker or us...

rubygem-safemode: safemode: Jail allow-list bypass via op-assign expressions

A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template...

rubygem-katello: Cross-tenant Content View Filter rule access and modification via unauthorized parent filter lookup

A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the parent Content View Filter. An authenticated, low-privileged user with Content View permissions in one organization may be able to access and modify filter rules belonging to a Conte...

rubygem-safemode: safemode: Jail allow-list bypass via op-assign expressions

A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template...

rubygem-katello: Cross-tenant Content View Filter rule access and modification via unauthorized parent filter lookup

A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the parent Content View Filter. An authenticated, low-privileged user with Content View permissions in one organization may be able to access and modify filter rules belonging to a Conte...

rubygem-safemode: safemode: Jail allow-list bypass via op-assign expressions

A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template...

Critical: Red Hat Security Advisory: Satellite 6.16.15 Async Update

An update is now available for Red Hat Satellite 6.16 for RHEL 8 and RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

AZL-113813 CVE-2026-126351 affecting package rubygem-addressable 2.9.0-1

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. Prior to 2.9.1, Addressable::URI.normalizepath repeatedly scans and rewrites paths while removing only one nested dot segment per pass, producing quadratic work. URInormalize,...

CVE-2026-107360

A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template...

CVE-2026-107360

A vulnerability exists in rubygem-safemode where compound assignment expressions in sandboxed code bypass the Jail allow-list . This allows an authenticated attacker capable of supplying template content to invoke arbitrary no-argument methods on objects exposed to the template renderer. Potentia...

EUVD-2026-124669

A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template...

CVE-2026-107360 Rubygem-safemode: safemode: jail allow-list bypass via op-assign expressions

A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template...

CVE-2026-107360

A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template...

[SECURITY] Fedora 43 Update: rubygem-nokogiri-1.19.7-1.fc43

Nokogiri parses and searches XML/HTML very quickly, and also has correctly implemented CSS3 selector support as well as XPath support. Nokogiri also features an Hpricot compatibility layer to help ease the change to using correct CSS and XPath...

[SECURITY] Fedora 44 Update: rubygem-nokogiri-1.19.7-1.fc44

Nokogiri parses and searches XML/HTML very quickly, and also has correctly implemented CSS3 selector support as well as XPath support. Nokogiri also features an Hpricot compatibility layer to help ease the change to using correct CSS and XPath...

CVE-2026-107360: Red Hat: A flaw was found in rubygem-safemode

A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template...

PT-2026-146029

Name of the Vulnerable Software and Affected Versions rubygem-safemode affected versions not specified Red Hat Satellite 6 Description A flaw exists in the rubygem-safemode Ruby sandbox where compound assignment expressions in sandboxed code are evaluated without mediating method calls through th...

AZL-113338 CVE-2026-126064 affecting package rubygem-nokogiri 1.19.4-1

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...

AZL-113335 CVE-2026-126062 affecting package rubygem-nokogiri 1.19.4-1

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, on JRuby, applications that parse untrusted XML with DTDLOAD, DTDVALID, or NOENT can have the NONET restriction bypassed when an external DTD or entity uses a short-form IPv4 host or uses absolute...