CVE-2026-46727

An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in the pthread-based getaddrinfo timeout handler rbgetaddrinfo in ext/socket/raddrinfo.c allows a remote attacker who can delay DNS responses near the user-specified timeout to crash a Ruby process that...

Discourse: Denial of Service (DoS) Vulnerability in Drafts Creation Endpoint

A Denial of Service DoS vulnerability was identified in the /drafts.json endpoint on the Discourse forum. Large payloads around 800,000 characters or more submitted to create drafts caused the server to process the request, return a 502 Bad Gateway error, but still save the draft. Submitting...