def_class

www.ruby-lang.org

CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class

www.ruby-lang.org

Nemeski@mander.xyz to

Ruby@programming.dev · 4 months ago

CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class | Ruby

www.ruby-lang.org

We published security advisory for CVE-2026-41316.

You must log in or register to comment.

Chat

Ruby@programming.dev

ruby@programming.dev

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !ruby@programming.dev

A community for discussion and news about Ruby programming.

Learning Ruby?

Try Ruby in your browser

Tools

Ruby Version Manager (RVM) Install, manage and work with multiple Ruby environments. adsf is an increasingly popular option too.
rbenv Groom your app’s Ruby environment with rbenv.
Looking for new gems? ruby-toolbox
Install Ruby on macOS

Documentation

Ruby API or Ruby Doc
YARD docs via rubydoc.info YARD Documentation Server

Books

Screencasts

News and updates

Ruby news in a weekly email from Ruby Weekly
‘Planet’ of Ruby blogs at rubyland.news
Ruby tweets at @RubyInside

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

14 users / day
0 users / week
0 users / month
0 users / 6 months
1 local subscriber
741 subscribers
42 Posts
0 Comments
Modlog