CVE-2026-34060

The Ruby LSP language server for Ruby is vulnerable to arbitrary Ruby code execution due to improper sanitization of the rubyLsp.branch VS Code workspace setting. The vulnerability exists because this setting is interpolated into a generated Gemfile without cleaning, allowing an attacker to execu...