Ruby patches Onigmo regex engine behind four critical GitLab RCEs
Ruby shipped 4.0.9, 3.4.12 and 3.3.13 on Oct 23 to fix three Onigmo bugs behind GitLab's CVE-2026-89078, -93577, -97229 and -110264. Any app compiling untrusted regex is exposed.
Ruby shipped 4.0.9, 3.4.12 and 3.3.13 on Oct 23 to fix three Onigmo bugs behind GitLab's CVE-2026-89078, -93577, -97229 and -110264. Any app compiling untrusted regex is exposed.