{"id":"ruby-news-2d7da9b97e61","seq":280,"kind":"release","title":"Security advisories: CVE-2026-80212 and CVE-2026-80213","url":"https://www.ruby-lang.org/en/news/2026/08/27/multiple-vulnerabilities-in-resolv/","permalink":"https://vulnpulse.app/items/ruby-news-2d7da9b97e61","summary":"Two vulnerabilities have been discovered in the resolv gem bundled with Ruby. They have been assigned the CVE identifiers CVE-2026-80212 and CVE-2026-80213 . We recommend upgrading the resolv gem. CVE-2026-80212: Memory exhaustion through malicious DNS responses An application that resolves a hostname an attacker can influence, such as a webhook target or a user-supplied URL, can be made to consume memory without bound. The attacker points a domain at a name server they control and returns responses that the library retains permanently. Repeated lookups grow the process until it runs out of m…","severity":null,"techs":["ruby"],"cves":["CVE-2026-80212","CVE-2026-80213"],"tags":["security"],"source":{"id":"ruby-news","name":"Ruby News"},"published_at":"2026-08-27T00:00:00.000Z","fetched_at":"2026-10-21T16:17:45.609Z"}