CVE-2026-44266

The Elo expression language (versions prior to 1.0.1 ) contains a vulnerability in its Ruby backend (src/compilers/ruby.ts). The issue arises because attacker-controlled text is embedded into Ruby double-quoted strings without escaping the # character. This allows Ruby interpolation forms in the ...