| Package | Affected versions | Patched versions |
|---|---|---|
| ruby | ≥ 3.0.0, < 3.0.4≥ 3.1.0, < 3.1.2 | 3.0.43.1.2 |
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free