Product by Debian
Ruby3.3
19 known vulnerabilities in Ruby3.3 (Debian), 1 of them actively exploited (CISA KEV).
Key figures
19
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-97229 | Integer Overflow or Wraparound in GitLab In CISA KEValso in 3 other products | 10.0 | |
| Critical | CVE-2026-110264 | Integer Overflow or Wraparound in GitLab | 10.0 | |
| High | CVE-2026-41316 | ERB has an @_init deserialization guard bypass via def_module / def_method / def_class | 8.1 | |
| Critical | CVE-2026-93577 | Integer Overflow or Wraparound in GitLab | 9.9 | |
| Critical | CVE-2026-27820 | zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption | 9.8 | |
| Critical | CVE-2026-89078 | Double Free in GitLab | 9.9 | |
| High | CVE-2025-24294 | Ruby Resolv: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2025-61594 | URI Credential Leakage Bypass over CVE-2025-27221 | 7.5 | |
| Critical | CVE-2026-42257 | net-imap: Command Injection via "raw" arguments to multiple commands | 9.8 | |
| Medium | CVE-2026-47240 | Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument | — | |
| High | CVE-2026-42258 | net-imap: Command Injection via unvalidated Symbol inputs | 5.3 | |
| High | CVE-2026-80212 | Ruby Resolv: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-42245 | net-imap: Quadratic complexity when reading response literals | 7.5 | |
| High | CVE-2026-42246 | net-imap vulnerable to STARTTLS stripping via invalid response timing | 7.4 | |
| High | CVE-2025-58767 | REXML has a DoS condition when parsing malformed XML file | 5.3 | |
| Medium | CVE-2026-42256 | net-imap: Denial of service via high iteration count for `SCRAM-*` authentication | 6.5 | |
| Medium | CVE-2026-47242 | Net::IMAP: Command Injection via ID command argument | — | |
| Medium | CVE-2026-80213 | Ruby Resolv: Numeric Truncation Error | 4.0 | |
| Low | CVE-2026-47241 | Net::IMAP: Denial of Service via incomplete raw argument validation | — |
News
- Max-Severity GitLab Vulnerability Exploited Against Alpine Linuxsecurityweek,
- CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEVthehackernews,
- Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Openthehackernews,
- 26th October – Threat Intelligence Reportcheckpoint-research,
- GitLab critical patches include one for a bug that allows code execution by unauthenticated userscsoonline,
- NCSC-2026-0447 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab door GitLab Inc.ncsc-nl,