--- title: "ruby-lang vulnerabilities: CVEs, CISA KEV and security advisories" url: https://radicalnotion.ai/vendor/rubylang type: vendor description: "ruby-lang has 140 published CVEs, 1 in CISA KEV and 46 with public exploits." updated: 2026-10-13 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # ruby-lang vulnerabilities - **Published CVEs:** 140 - **In CISA KEV:** 1 - **With a public exploit:** 46 - **With a patch:** 125 - **Average CVSS:** 6.9 - **CVEs in the last two years:** 18 - **First CVE:** 2007-10-01 - **Latest CVE:** 2026-10-13 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 22 | | High | 51 | | Medium | 62 | | Low | 5 | | Unscored | 0 | ## Most affected products | Product | CVEs | | --- | --- | | [Ruby](https://radicalnotion.ai/vendor/rubylang/ruby) | 115 | | [rexml](https://radicalnotion.ai/vendor/rubylang/rexml) | 8 | | [net::imap](https://radicalnotion.ai/vendor/rubylang/net-imap) | 6 | | [CGI](https://radicalnotion.ai/vendor/rubylang/cgi) | 5 | | [webrick](https://radicalnotion.ai/vendor/rubylang/webrick) | 5 | | [URI](https://radicalnotion.ai/vendor/rubylang/uri) | 4 | | [rdoc](https://radicalnotion.ai/vendor/rubylang/rdoc) | 2 | | [openssl](https://radicalnotion.ai/vendor/rubylang/openssl) | 2 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 14 | | [CWE-400](https://radicalnotion.ai/cwe/cwe-400) | Uncontrolled Resource Consumption | 8 | | [CWE-264](https://radicalnotion.ai/cwe/cwe-264) | Permissions, Privileges, and Access Controls | 8 | | [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 8 | | [CWE-399](https://radicalnotion.ai/cwe/cwe-399) | Resource Management Errors | 7 | | [CWE-1333](https://radicalnotion.ai/cwe/cwe-1333) | Inefficient Regular Expression Complexity | 7 | | [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 7 | | [CWE-189](https://radicalnotion.ai/cwe/cwe-189) | Numeric Errors | 6 | ## Assigning CNAs | CNA | CVEs | | --- | --- | | [mitre](https://radicalnotion.ai/cna/mitre) | 74 | | [redhat](https://radicalnotion.ai/cna/redhat) | 37 | | [GitHub\_M](https://radicalnotion.ai/cna/github-m) | 19 | | [certcc](https://radicalnotion.ai/cna/certcc) | 4 | | [hackerone](https://radicalnotion.ai/cna/hackerone) | 3 | | [apple](https://radicalnotion.ai/cna/apple) | 1 | | [zdi](https://radicalnotion.ai/cna/zdi) | 1 | | [GitLab](https://radicalnotion.ai/cna/gitlab) | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2019 | 9 | | 2020 | 6 | | 2021 | 5 | | 2022 | 6 | | 2023 | 4 | | 2024 | 8 | | 2025 | 9 | | 2026 | 9 | ## Latest CVEs | CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published | | --- | --- | --- | --- | --- | --- | --- | | CVE-2026-97229 | Integer Overflow or Wraparound in GitLab | critical | 10.0 | 65.2% | Yes | 2026-10-13 | | CVE-2026-46727 | - | high | 8.1 | 0.5% | No | 2026-05-22 | | CVE-2026-42258 | net-imap: Command Injection via unvalidated Symbol inputs | medium | 5.8 | 0.8% | No | 2026-05-09 | | CVE-2026-42257 | net-imap: Command Injection via "raw" arguments to multiple commands | medium | 5.8 | 0.4% | No | 2026-05-09 | | CVE-2026-42256 | net-imap: Denial of service via high iteration count for \`SCRAM-\*\` authentication | medium | 6.0 | 0.3% | No | 2026-05-09 | | CVE-2026-42245 | net-imap: Quadratic complexity when reading response literals | low | 2.3 | 0.4% | No | 2026-05-09 | | CVE-2026-42246 | net-imap vulnerable to STARTTLS stripping via invalid response timing | high | 7.6 | 0.3% | No | 2026-05-09 | | CVE-2026-27820 | zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption | medium | 5.9 | 0.6% | No | 2026-04-16 | | CVE-2026-33210 | Ruby JSON has a format string injection vulnerability | high | 8.3 | 0.9% | No | 2026-03-20 | | CVE-2025-61594 | URI Credential Leakage Bypass over CVE-2025-27221 | low | 2.7 | 0.6% | No | 2025-12-30 | | CVE-2025-58767 | REXML has a DoS condition when parsing malformed XML file | low | 1.2 | 0.2% | No | 2025-09-17 | | CVE-2025-6442 | Ruby WEBrick read\_header HTTP Request Smuggling Vulnerability | medium | 5.9 | 0.5% | No | 2025-06-25 | ## Frequently asked questions ### How many CVEs does ruby-lang have? ruby-lang has 140 published CVE records since 2007, including 18 in the last two years. ### How many ruby-lang CVEs are in CISA KEV? 1 of ruby-lang's CVEs is listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline. ### Which ruby-lang products have the most CVEs? The ruby-lang products with the most published CVEs are Ruby, rexml, net::imap, CGI, webrick. ### What are the most common weakness types in ruby-lang CVEs? ruby-lang's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-400 (Uncontrolled Resource Consumption), CWE-264 (Permissions, Privileges, and Access Controls), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')). ### Are there public exploits for ruby-lang vulnerabilities? Yes — 46 of ruby-lang's CVEs have a known public exploit. ### How many critical ruby-lang vulnerabilities are there? ruby-lang has 22 critical and 51 high-severity CVEs. ### What is the average severity of ruby-lang CVEs? The average CVSS base score across ruby-lang's scored CVEs is 6.9. ## Related vendors - [NEC](https://radicalnotion.ai/vendor/nec) (141 CVEs) - [Tungsten Automation](https://radicalnotion.ai/vendor/tungsten-automation) (141 CVEs) - [Kubernetes](https://radicalnotion.ai/vendor/kubernetes) (140 CVEs) - [AncoraThemes](https://radicalnotion.ai/vendor/ancorathemes) (140 CVEs) - [anisha](https://radicalnotion.ai/vendor/anisha) (140 CVEs) - [Avaya](https://radicalnotion.ai/vendor/avaya) (140 CVEs) - [Asterisk](https://radicalnotion.ai/vendor/asterisk) (139 CVEs) - [NLnet Labs](https://radicalnotion.ai/vendor/nlnet-labs) (139 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/rubylang). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.