Ruby Lang News

A use-after-free vulnerability has been discovered in the pthread-based getaddrinfo timeout handler of Ruby. This vulnerability has been assigned the CVE ide...

Ruby Lang News · Backend · May 20, 2026

Ruby 4.0.4 Released

Ruby 4.0.4 has been released.

Ruby Lang News · General Discussion · May 11, 2026

Ruby 4.0.3 Released

Ruby 4.0.3 has been released.

Ruby Lang News · General Discussion · Apr 21, 2026

CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class

We published security advisory for CVE-2026-41316.

Ruby Lang News · Backend · DevOps · Apr 21, 2026

Ruby 3.2.11 Released

Ruby 3.2.11 has been released. This release includes an update to the zlib gem addressing CVE-2026-27820.

Ruby Lang News · General Discussion · Mar 27, 2026

Ruby 3.3.11 Released

Ruby 3.3.11 has been released. This release includes an update to the zlib gem addressing CVE-2026-27820, along with some bug fixes.

Ruby Lang News · General Discussion · Mar 26, 2026

Ruby 4.0.2 Released

Ruby 4.0.2 has been released.

Ruby Lang News · General Discussion · Mar 16, 2026

Ruby 3.4.9 Released

Ruby 3.4.9 has been released.

Ruby Lang News · General Discussion · Mar 11, 2026