Whoops, I couldn't find that page - RubySec

You may want to try a search above, or [visit the homepage](/). Also, here are some recent posts:

Oct 08

CVE-2026-107715 (mechanize): Mechanize sends credential headers to another host after an HTTP redirect

posted in •

Oct 08

CVE-2026-107399 (mechanize): Mechanize sends credential headers to another origin after a meta refresh

posted in •

Oct 07

GHSA-w3mx-4vv9-hjpg (css_parser): Arbitrary local-file read via attacker-controlled `@import` into `load_file!` (the `base_dir` branch of `add_block!`) - incomplete fix of GHSA-9pmc-p236-855h

posted in •

Oct 05

GHSA-wr87-m4jw-29x5 (dalli): Per-request raw and the JSON serializer don't prevent unsafe deserialization

posted in •

Oct 05

GHSA-w39f-xq2m-4g8x (dalli): Forking can resend buffered memcached requests and desynchronize the parent's connection

posted in •

Oct 05

GHSA-p6pm-ch9v-44vx (dalli): Pipelined get_multi can return another key's value after an error reply

posted in •

Oct 05

GHSA-m252-9cgf-vx2w (dalli): With a namespace, a retried request reads or writes a different key

posted in •

Oct 05

GHSA-4qp6-2jcr-596v (dalli): Routing tokens can inject meta protocol flags, and failed requests can retry forever

posted in •

Oct 05

GHSA-3553-vcg5-72jw (dalli): Unbounded decompression and reply sizes allow memory exhaustion

posted in •

Oct 05

CVE-2026-79654 (katello): Katello - Unauthorized disclosure of Content View lifecycle information

posted in •