Peaked at #3 Now #5
Ruby regex compilation flaws need patching
GitLab's vulnerability moved upstream to Ruby, with multiple 10.0 critical regexp compilation exploits requiring immediate patching.
Key points
- @jaydrogers said the GitLab bug has moved upstream into Ruby, with multiple 10.0 CRITICAL exploits, and urged users to patch.
- @markgadala said Linux faces two critical RCE vulnerabilities in KSMBD, both rated 9.0/10, with no official kernel fixes yet and the flaws made public before patches were ready.
- @ThePrimeagen listed OpenCode, php, node, ruby, curl, eMudhra, Railway and OpenCode again as part of the week's security incidents.
- @TheHackersNews said a filename is enough to trigger OS command execution in Python's Pillow image library via CVE-2026-112900.
Key points and the reaction summary are written by AI from the posts on this page. Check the original post. How we use AI
Original post
Top replies on X
Sign in to see 1 top replies from X
From @OliverBaumgart and others. Spam removed, with English and Chinese translations.
Discussion 0
Sign up Sign in to join the discussion
No comments yet. Start the conversation.