---
title: "ruby-lang Ruby vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/rubylang/ruby
type: product
description: "ruby-lang Ruby has 115 published CVEs, 1 in CISA KEV and 44 with public exploits."
updated: 2026-10-13
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# ruby-lang Ruby vulnerabilities

Vendor: [ruby-lang](https://radicalnotion.ai/vendor/rubylang)

- **Published CVEs:** 115
- **In CISA KEV:** 1
- **With a public exploit:** 44
- **With a patch:** 102
- **Average CVSS:** 7.1
- **First CVE:** 2007-10-01
- **Latest CVE:** 2026-10-13
- **Platforms:** fedora, fedora 8, linux, mac os x server, macos, windows

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 22 |
| High | 45 |
| Medium | 48 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 14 |
| [CWE-264](https://radicalnotion.ai/cwe/cwe-264) | Permissions, Privileges, and Access Controls | 8 |
| [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 7 |
| [CWE-399](https://radicalnotion.ai/cwe/cwe-399) | Resource Management Errors | 7 |
| [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 7 |
| [CWE-189](https://radicalnotion.ai/cwe/cwe-189) | Numeric Errors | 6 |
| [CWE-287](https://radicalnotion.ai/cwe/cwe-287) | Improper Authentication | 6 |
| [CWE-310](https://radicalnotion.ai/cwe/cwe-310) | Cryptographic Issues | 6 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2015 | 1 |
| 2016 | 1 |
| 2017 | 16 |
| 2018 | 8 |
| 2019 | 7 |
| 2020 | 5 |
| 2021 | 5 |
| 2022 | 6 |
| 2023 | 2 |
| 2024 | 3 |
| 2025 | 2 |
| 2026 | 2 |

## Affected versions (top 24 of 174)

| Version | Kind | CVEs |
| --- | --- | --- |
| 1.9.3 | range | 18 |
| 2.0.0 | range | 18 |
| 1.8.7 | range | 15 |
| 1.9.1 | range | 14 |
| 1.9.2 | range | 14 |
| 1.8.6 | range | 13 |
| 1.9 | range | 13 |
| 2.0 | range | 11 |
| 1.8.5 | range | 8 |
| 1.9.0 | range | 8 |
| 2.3.0 | range | 8 |
| 2.6.0 | range | 8 |
| 2.2.10 | patched | 6 |
| 2.3.7 | patched | 6 |
| 2.4.4 | patched | 6 |
| 2.5.1 | patched | 6 |
| 1.8.5.231 | patched | 5 |
| 1.8.6.230 | patched | 5 |
| 1.8.7.22 | patched | 5 |
| 1.9.0.2 | patched | 3 |
| 2.7.3 | patched | 2 |
| 2.7.5 | patched | 2 |
| 3.0.1 | patched | 2 |
| 3.0.3 | patched | 2 |

## CVEs (first 30 of 115, most severe first)

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-97229 | Integer Overflow or Wraparound in GitLab | critical | 10.0 | Yes | Yes | Yes |
| CVE-2026-46727 | - | high | 8.1 | No | No | Yes |
| CVE-2025-27220 | CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement | medium | 6.3 | No | No | Yes |
| CVE-2025-0306 | Ruby: openssl: ruby marvin attack | high | 7.4 | No | No | No |
| CVE-2024-49761 | REXML ReDoS vulnerability | medium | 6.6 | No | No | Yes |
| CVE-2024-27280 | StringIO buffer overread vulnerability | critical | 9.3 | No | No | Yes |
| CVE-2024-26142 | Rails possible ReDoS vulnerability in Accept header parsing in Action Dispatch | high | 7.5 | No | Yes | Yes |
| CVE-2023-28756 | Ruby Time component ReDoS issue | high | 7.5 | No | No | Yes |
| CVE-2023-22795 | ReDoS based DoS vulnerability in Action Dispatch | high | 7.5 | No | No | Yes |
| CVE-2021-33621 | HTTP response splitting in CGI | high | 8.8 | No | Yes | Yes |
| CVE-2022-28739 | - | high | 7.5 | No | No | Yes |
| CVE-2022-28738 | - | critical | 9.8 | No | No | Yes |
| CVE-2021-41816 | Buffer overrun in CGI.escape\_html | critical | 9.8 | No | Yes | Yes |
| CVE-2021-41819 | Cookie Prefix Spoofing in CGI::Cookie.parse | high | 7.5 | No | Yes | Yes |
| CVE-2021-41817 | Regular expression denial of service vulnerability (ReDoS) in date | high | 7.5 | No | Yes | Yes |
| CVE-2021-32066 | - | high | 7.4 | No | Yes | Yes |
| CVE-2021-31799 | Arbitrary Code Execution in Rdoc | high | 7.0 | No | No | Yes |
| CVE-2021-28966 | Tempfile on Windows path traversal vulnerability | high | 7.5 | No | Yes | Yes |
| CVE-2021-31810 | - | medium | 5.8 | No | Yes | Yes |
| CVE-2021-28965 | REXML round-trip instability | high | 7.5 | No | No | Yes |
| CVE-2020-25613 | WEBRick vulnerable to HTTP Request/Response Smuggling | high | 7.5 | No | No | Yes |
| CVE-2020-10933 | - | medium | 5.3 | No | Yes | Yes |
| CVE-2020-10663 | Unsafe object creation in json RubyGem | high | 7.5 | No | No | Yes |
| CVE-2020-5247 | HTTP Response Splitting in Puma | high | 7.5 | No | No | Yes |
| CVE-2016-2338 | - | critical | 9.8 | No | Yes | No |
| CVE-2015-1855 | - | medium | 5.9 | No | No | Yes |
| CVE-2019-15845 | - | medium | 6.5 | No | No | Yes |
| CVE-2011-4121 | - | critical | 9.8 | No | No | Yes |
| CVE-2011-3624 | - | medium | 5.3 | No | No | No |
| CVE-2019-16255 | - | high | 8.1 | No | Yes | Yes |

## Frequently asked questions

### How many CVEs does ruby-lang Ruby have?

ruby-lang Ruby has 115 published CVE records since 2007.

### How many ruby-lang Ruby CVEs are in CISA KEV?

1 of ruby-lang Ruby's CVEs is listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

### Are there public exploits for ruby-lang Ruby vulnerabilities?

Yes — 44 of ruby-lang Ruby's CVEs have a known public exploit.

### Which versions of ruby-lang Ruby are affected?

174 distinct ruby-lang Ruby versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in ruby-lang Ruby CVEs?

ruby-lang Ruby's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-264 (Permissions, Privileges, and Access Controls), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-399 (Resource Management Errors).

### How many critical ruby-lang Ruby vulnerabilities are there?

ruby-lang Ruby has 22 critical and 45 high-severity CVEs.

### What is the average severity of ruby-lang Ruby CVEs?

The average CVSS base score across ruby-lang Ruby's scored CVEs is 7.1.

## Other products from this vendor

- [rexml](https://radicalnotion.ai/vendor/rubylang/rexml) (8 CVEs)
- [net::imap](https://radicalnotion.ai/vendor/rubylang/net-imap) (6 CVEs)
- [CGI](https://radicalnotion.ai/vendor/rubylang/cgi) (5 CVEs)
- [webrick](https://radicalnotion.ai/vendor/rubylang/webrick) (5 CVEs)
- [URI](https://radicalnotion.ai/vendor/rubylang/uri) (4 CVEs)
- [openssl](https://radicalnotion.ai/vendor/rubylang/openssl) (2 CVEs)
- [rdoc](https://radicalnotion.ai/vendor/rubylang/rdoc) (2 CVEs)
- [date](https://radicalnotion.ai/vendor/rubylang/date) (1 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/rubylang/ruby). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.