Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

3 hours ago [email protected] (The Hacker News)

Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month.

GitLab found that a specially crafted pattern could corrupt memory while Ruby compiles it, potentially leading to code execution on its own servers.

Ruby says any

The post “Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws” appeared first on The Hacker News

Source:The Hacker News – [email protected] (The Hacker News)

Tags: Critical Severity, Hacker, Hacker News

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

2 hours ago [email protected] (The Hacker News)

URGENT – PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

9 hours ago [email protected] (The Hacker News)

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

11 hours ago [email protected] (The Hacker News)

Critical Vulnerability

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

12 hours ago [email protected] (The Hacker News)

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

13 hours ago [email protected] (The Hacker News)

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware