Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

As cited

Copy frozen at 2026-10-23 22:12 UTC (site build).

vulnerabilities

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Ruby released versions 3.3.13, 3.4.12, and 4.0.9 to address three bugs in Onigmo, its built-in regular expression engine. These flaws underlie four critical remote code execution (RCE) vulnerabilities that GitLab patched recently, which could occur when specially crafted regex patterns corrupt memory during compilation.

Why it matters: Ruby application operators and GitLab administrators need to upgrade immediately, as these regex bugs enable RCE on servers running affected Ruby versions.

Source published

2026-10-23 17:54 UTC

First seen by Cybersecurity Tracker

2026-10-23 20:59 UTC