<![CDATA[RubySec]]>2026-10-06T19:26:51+00:00https://rubysec.com/Jekyll<![CDATA[GHSA-wr87-m4jw-29x5 (dalli): Per-request raw and the JSON serializer don't prevent unsafe deserialization]]>https://rubysec.com/advisories/GHSA-wr87-m4jw-29x52026-10-05T00:00:00+00:00<![CDATA[GHSA-w39f-xq2m-4g8x (dalli): Forking can resend buffered memcached requests and desynchronize the parent's connection]]>https://rubysec.com/advisories/GHSA-w39f-xq2m-4g8x2026-10-05T00:00:00+00:00<![CDATA[GHSA-p6pm-ch9v-44vx (dalli): Pipelined get_multi can return another key's value after an error reply]]>https://rubysec.com/advisories/GHSA-p6pm-ch9v-44vx2026-10-05T00:00:00+00:00<![CDATA[GHSA-m252-9cgf-vx2w (dalli): With a namespace, a retried request reads or writes a different key]]>https://rubysec.com/advisories/GHSA-m252-9cgf-vx2w2026-10-05T00:00:00+00:00`
can arrange for another user's retried read to return attacker-chosen
data.
Affected: every single-key operation since 5.0.3, single-server
`get_multi` since 5.1.0, and `get_with_metadata` and `fetch_with_lock`
since 4.1.0. Clients without a namespace are not affected, and 3.2.x is
not affected.
### Workarounds
Don't configure a `namespace`; prefix keys in application code instead.]]><![CDATA[GHSA-4qp6-2jcr-596v (dalli): Routing tokens can inject meta protocol flags, and failed requests can retry forever]]>https://rubysec.com/advisories/GHSA-4qp6-2jcr-596v2026-10-05T00:00:00+00:00<![CDATA[GHSA-3553-vcg5-72jw (dalli): Unbounded decompression and reply sizes allow memory exhaustion]]>https://rubysec.com/advisories/GHSA-3553-vcg5-72jw2026-10-05T00:00:00+00:00`, or a binary body length) was
used to read or buffer that many bytes, so a hostile or compromised
server could make the client allocate gigabytes.
Exploiting either requires write access to the memcached instance (a
shared or exposed instance, another tenant), or a malicious server or
proxy. Patched versions add a `decompressed_max_bytes` option (default
128 MiB) and reject reply sizes over 1 GiB.]]><![CDATA[CVE-2026-67989 (ruby_llm): Polynomial-Time Regular Expression Denial of Service (ReDoS) vulnerability]]>https://rubysec.com/advisories/CVE-2026-679892026-10-01T00:00:00+00:00<![CDATA[CVE-2026-67987 (ruby_llm): Polynomial-Time Regular Expression Denial of Service (ReDoS) vulnerability]]>https://rubysec.com/advisories/CVE-2026-679872026-10-01T00:00:00+00:00<![CDATA[CVE-2026-12545 (hammer_cli): hammer_cli - Insecure interpolation of the $EDITOR environment variable]]>https://rubysec.com/advisories/CVE-2026-125452026-10-01T00:00:00+00:00<![CDATA[GHSA-42qh-8mx8-7wqm (rack-proxy): HTTP response smuggling via ambiguous backend response framing in rack-proxy 1.x]]>https://rubysec.com/advisories/GHSA-42qh-8mx8-7wqm2026-09-25T00:00:00+00:00<![CDATA[GHSA-6wmv-xq9m-fmp7 (dalli): Memcached command injection through numeric arguments to incr/decr and fetch_with_lock]]>https://rubysec.com/advisories/GHSA-6wmv-xq9m-fmp72026-09-24T00:00:00+00:00<![CDATA[GHSA-p8jg-8p9f-pgmr (faraday-http-cache): Cache entries deserialized with JSON.load can instantiate arbitrary classes named by an origin server]]>https://rubysec.com/advisories/GHSA-p8jg-8p9f-pgmr2026-09-15T00:00:00+00:00<![CDATA[GHSA-c33f-42f2-gwcc (faraday-http-cache): Shared cache serves responses to authenticated requests to other callers]]>https://rubysec.com/advisories/GHSA-c33f-42f2-gwcc2026-09-15T00:00:00+00:00<![CDATA[CVE-2026-88030 (mongo): MongoDB Ruby Driver - Improper neutralization of special elements in data query logic in the GridFS component]]>https://rubysec.com/advisories/CVE-2026-880302026-09-10T00:00:00+00:00<![CDATA[CVE-2026-85396 (rubyzip): path traversal vulnerability in pre-3.4.0 rubyzip gem]]>https://rubysec.com/advisories/CVE-2026-853962026-09-03T00:00:00+00:00<![CDATA[GHSA-g7vv-4mjj-6fgm (alchemy_cms): Account Takeover & Privilege-Escalation To Admin via Stored XSS in Menu Node Name Rendered in Page Properties Configure Dialog]]>https://rubysec.com/advisories/GHSA-g7vv-4mjj-6fgm2026-09-02T00:00:00+00:00<![CDATA[GHSA-4qhx-6wrv-5hg2 (alchemy_cms): Account Takeover & Privilege-Escalation To Admin via Stored XSS in Menu Node Name Rendered in Admin Configure Dialog Page Content]]>https://rubysec.com/advisories/GHSA-4qhx-6wrv-5hg22026-09-02T00:00:00+00:00<![CDATA[CVE-2026-81097 (rails-mcp-server): The execute_ruby tool is documented as a read-only Ruby sandbox]]>https://rubysec.com/advisories/CVE-2026-810972026-08-27T00:00:00+00:00<![CDATA[CVE-2026-80213 (resolv): CVE-2026-80213 - Hostname validation bypass]]>https://rubysec.com/advisories/CVE-2026-802132026-08-27T00:00:00+00:00<![CDATA[CVE-2026-80212 (resolv): CVE-2026-80212 - Memory exhaustion through malicious DNS responses]]>https://rubysec.com/advisories/CVE-2026-802122026-08-27T00:00:00+00:00