## Ruby 3.3.12 Released

- 種別: release
- 関連技術: ruby, github
- CVE: CVE-2026-41316, CVE-2026-42245, CVE-2026-42246, CVE-2026-42256, CVE-2026-42257, CVE-2026-42258, CVE-2026-47240, CVE-2026-47241, CVE-2026-47242
- 公開日時: 2026-07-16T05:08:11.000Z
- 情報源: Ruby News (https://www.ruby-lang.org/en/news/2026/07/16/ruby-3-3-12-released/)
- パーマリンク: https://vulnpulse.app/items/ruby-news-b1eabc6b2df3

Ruby 3.3.12 has been released. This release includes security fixes. Please check the topics below for details. CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class This release updates the default gem erb to 4.0.3.1 and the bundled gem net-imap to 0.4.25. The net-imap update fixes CVE-2026-42245, CVE-2026-42246, CVE-2026-42256, CVE-2026-42257, CVE-2026-42258, CVE-2026-47240, CVE-2026-47241 and CVE-2026-47242. Please see the release notes of net-imap v0.4.24 and net-imap v0.4.25 for the details of these fixes. Please see the GitHub releases for furth…