Product by Shopify

    Ruby-lsp

    2 known vulnerabilities in Ruby-lsp (Shopify), 0 of them actively exploited (CISA KEV).

    Key figures

    2

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Ruby-lsp (Shopify)
    CriticalCVE-2026-34060

    Ruby LSP has arbitrary code execution through branch setting

    		9.8
    MediumCVE-2026-48122

    Workspace settings can override executable and Gemfile paths used by the Ruby LSP VS Code extension

    		—

    All products by Shopify