## Security advisories: CVE-2026-80212 and CVE-2026-80213

- 種別: release
- 関連技術: ruby
- CVE: CVE-2026-80212, CVE-2026-80213
- 公開日時: 2026-08-27T00:00:00.000Z
- 情報源: Ruby News (https://www.ruby-lang.org/en/news/2026/08/27/multiple-vulnerabilities-in-resolv/)
- パーマリンク: https://vulnpulse.app/items/ruby-news-2d7da9b97e61

Two vulnerabilities have been discovered in the resolv gem bundled with Ruby. They have been assigned the CVE identifiers CVE-2026-80212 and CVE-2026-80213 . We recommend upgrading the resolv gem. CVE-2026-80212: Memory exhaustion through malicious DNS responses An application that resolves a hostname an attacker can influence, such as a webhook target or a user-supplied URL, can be made to consume memory without bound. The attacker points a domain at a name server they control and returns responses that the library retains permanently. Repeated lookups grow the process until it runs out of m…