CERT24Ruby fixes three regex engine bugs responsible for four critical GitLab RCE flawsLoading data…
CERT24Threat Observatory
Period

Ruby fixes three regex engine bugs responsible for four critical GitLab RCE flaws

Ruby released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in the Onigmo regular expression engine. The bugs were behind four critical GitLab vulnerabilities in which a specially crafted regular expression pattern could corrupt memory while Ruby compiled it, potentially leading to code execution.

← Back to intelligence

Ruby fixes three regex engine bugs responsible for four critical GitLab RCE flaws

Ruby released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in the Onigmo regular expression engine. The bugs were behind four critical GitLab vulnerabilities in which a specially crafted regular expression pattern could corrupt memory while Ruby compiled it, potentially leading to code execution.