{"id":"ruby-news-b1eabc6b2df3","seq":281,"kind":"release","title":"Ruby 3.3.12 Released","url":"https://www.ruby-lang.org/en/news/2026/07/16/ruby-3-3-12-released/","permalink":"https://vulnpulse.app/items/ruby-news-b1eabc6b2df3","summary":"Ruby 3.3.12 has been released. This release includes security fixes. Please check the topics below for details. CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class This release updates the default gem erb to 4.0.3.1 and the bundled gem net-imap to 0.4.25. The net-imap update fixes CVE-2026-42245, CVE-2026-42246, CVE-2026-42256, CVE-2026-42257, CVE-2026-42258, CVE-2026-47240, CVE-2026-47241 and CVE-2026-47242. Please see the release notes of net-imap v0.4.24 and net-imap v0.4.25 for the details of these fixes. Please see the GitHub releases for furth…","severity":null,"techs":["ruby","github"],"cves":["CVE-2026-41316","CVE-2026-42245","CVE-2026-42246","CVE-2026-42256","CVE-2026-42257","CVE-2026-42258","CVE-2026-47240","CVE-2026-47241","CVE-2026-47242"],"tags":["security"],"source":{"id":"ruby-news","name":"Ruby News"},"published_at":"2026-07-16T05:08:11.000Z","fetched_at":"2026-10-21T16:17:45.609Z"}