1 known security vulnerability
- highGHSA-q339-8rmv-2mhv(CVE-2026-41316)
ERB has an @_init deserialization guard bypass via def_module / def_method / def_class
An easy to use but powerful templating system for Ruby.
Required Ruby Version
>= 2.5.0
Authors
Masatoshi SEKI, Takashi Kokubun
Versions
-
6.0.7
-
source
- 6.0.7 source August 04, 2026 (27 KB)
-
java
- 6.0.7 multi-abi August 04, 2026 (27 KB)
-
-
6.0.6
-
source
- 6.0.6 source July 20, 2026 (27 KB)
-
java
- 6.0.6 multi-abi July 20, 2026 (27 KB)
-
-
6.0.5
-
source
- 6.0.5 source July 16, 2026 (27 KB)
-
java
- 6.0.5 multi-abi July 16, 2026 (27 KB)
-
-
6.0.4
-
source
- 6.0.4 source April 21, 2026 (27 KB)
-
java
- 6.0.4 multi-abi April 21, 2026 (27 KB)
-
-
6.0.3
-
source
- 6.0.3 source April 15, 2026 (27 KB) vulnerable
-
java
- 6.0.3 multi-abi April 15, 2026 (27 KB) vulnerable
-
-
4.0.3
-
source
- 4.0.3 source August 22, 2023 (19.5 KB) vulnerable
-
java
- 4.0.3 multi-abi January 04, 2024 (19.5 KB) vulnerable
-