Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab found that a specially crafted pattern could corrupt memory while Ruby compiles it, potentially leading to code... Weiterlesen: Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitL…
Intelligence View
⚡ tsecurity.de Intelligence
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Hiçbir okuyucu henüz yorum yok
Bu sayfa yararlı mıydı?
0
Powered by tsecurity.de
tsecurity.de Hub
İlgili Story Cluster & Kaynaklar (vector AI)
15 Kaynaklar
Security: Cross-Site Scripting in python-nh3 (Fedora)
14 diğer kaynaklar
PPro-Linuxvor 13 Std.Security: Cross-Site Scripting in rust-ammonia (Fedora) VVulDB Updatesvor 4 Std.CVE-2026-56354 | n8n prior 1.123.24/2.10.4/2.12.0 Form Node cross site scripting PPro-Linux Securityvor 13 Std.Cross-Site Scripting in rust-ammonia (Fedora) PPro-Linux Securityvor 13 Std.Cross-Site Scripting in python-nh3 (Fedora) VVulDB Updatesvor 6 Std.CVE-2024-13362 | WP Coupons and Deals Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 6 Std.CVE-2024-13362 | AidWP Plugin on WordPress Parameter url cross site scripting
+8
12 Kaynaklar
CVE-2026-99167 | Linux Kernel up to 6.18.58/7.2.12 Traffic Control Action __tcf_action_put use after free (EUVD-2026-111919)
11 diğer kaynaklar
VVulDB Updatesvor 1 Std.CVE-2026-99164 | Linux Kernel up to 7.2.12 SPI Driver dma_len use after free (EUVD-2026-111916) GGoogle Alertvor 3 Std.Kritische Linux-Kernel-Sicherheitslücke CVE-2026-98432 ermöglicht die Ausführung von ... VVulDB Updatesvor 2 Std.CVE-2026-99216 | Linux Kernel up to 6.18.58/7.2.12 VMBus vmbus_initiate_unload state issue (EUVD-2026-111968) VVulDB Updatesvor 2 Std.CVE-2026-99213 | Linux Kernel up to 6.18.58/7.2.12 vsock vsock_insert_connected.cold connect memory corruption (EUVD-2026-111965) VVulDB Updatesvor 2 Std.CVE-2026-99212 | Linux Kernel up to 6.18.58/7.2.12 RDS net/rds rds_rdma_cm_event_handler_cmn i_cm_id race condition (EUVD-2026-111964) VVulDB Updatesvor 2 Std.CVE-2026-99203 | Linux Kernel up to 6.18.58/7.2.12 Pipe pipe_fasync use after free (EUVD-2026-111955)
+5
11 Kaynaklar
Security: Mehrere Probleme in keepassxc (Fedora)
10 diğer kaynaklar
PPro-Linuxvor 13 Std.Security: Mehrere Probleme in rust-trustfall-rustdoc-adapter60 (Fedora) PPro-Linuxvor 13 Std.Security: Mehrere Probleme in rust-trustfall-rustdoc-adapter (Fedora) PPro-Linuxvor 13 Std.Security: Mehrere Probleme in rust-trustfall-rustdoc-adapter57 (Fedora) PPro-Linuxvor 13 Std.Security: Mehrere Probleme in rust-cargo-semver-checks (Fedora) PPro-Linux Securityvor 13 Std.Mehrere Probleme in rust-trustfall-rustdoc-adapter (Fedora) PPro-Linux Securityvor 13 Std.Mehrere Probleme in rustup (Fedora)
+4
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/tr/4293301/guevenlik-aklar-cve/ruby-fixes-three-regex-engine-bugs-responsible-for-four-critical-gitlab-rce-flaws/