{"id":"CVE-2026-27820","aliases":["ALPINE-CVE-2026-27820","ALSA-2026:50728","ALSA-2026:50773","ALSA-2026:50778","ALSA-2026:50827","ALSA-2026:50828","AZL-83450","BELL-CVE-2026-27820","CLSA-2026-1785320518","CLSA-2026-1785428387","CLSA-2026-1786470325","DEBIAN-CVE-2026-27820","EUVD-2026-23278","GHSA-g857-hhfv-j68w","OESA-2026-3533","OESA-2026-3534","OESA-2026-3535","OESA-2026-3536","OESA-2026-3537","RHSA-2026:50728","RHSA-2026:50773","RHSA-2026:50778","RHSA-2026:50827","RHSA-2026:50828","RHSA-2026:7305","RHSA-2026:7307","RHSA-2026:8838","RLSA-2026:50728","RLSA-2026:50773","RLSA-2026:50778","RLSA-2026:50827","RLSA-2026:50828","SUSE-SU-2026:1066-1","UBUNTU-CVE-2026-27820","USN-8556-1","openSUSE-SU-2026:21878-1"],"status":"published","title":"zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption","description":"zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.","severity":{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00561,"percentile":0.47154,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120","CWE-131"],"published":"2026-03-20T19:39:31.184471Z","modified":"2026-11-11T09:39:30Z","fixes":[{"ecosystem":"RubyGems","package":"zlib","fixed_in":["3.2.3","3.1.2","3.0.1"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.21","package":"ruby","fixed_in":["3.3.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ruby","fixed_in":["3.4.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ruby","fixed_in":["3.4.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ruby","fixed_in":["3.4.9-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"ruby","fixed_in":["3.3.5-8"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"ruby","fixed_in":["3.3.10-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"ruby","fixed_in":["3.4.9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"ruby","fixed_in":["3.4.9-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby","fixed_in":["3.0.7-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby-default-gems","fixed_in":["3.0.7-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby-devel","fixed_in":["3.0.7-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby-doc","fixed_in":["3.0.7-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby-libs","fixed_in":["3.0.7-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-bigdecimal","fixed_in":["3.0.0-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-bundler","fixed_in":["2.2.33-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-io-console","fixed_in":["0.5.7-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-irb","fixed_in":["1.3.5-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-json","fixed_in":["2.5.1-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-minitest","fixed_in":["5.14.2-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-power_assert","fixed_in":["1.2.1-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-psych","fixed_in":["3.3.2-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rake","fixed_in":["13.0.3-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rbs","fixed_in":["1.4.0-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rdoc","fixed_in":["6.3.4.1-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rexml","fixed_in":["3.2.5-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rss","fixed_in":["0.2.9-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-test-unit","fixed_in":["3.3.7-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-typeprof","fixed_in":["0.15.2-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygems","fixed_in":["3.2.33-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygems-devel","fixed_in":["3.2.33-165.el9_6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby","fixed_in":["3.0.4-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby-default-gems","fixed_in":["3.0.4-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby-devel","fixed_in":["3.0.4-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby-doc","fixed_in":["3.0.4-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby-libs","fixed_in":["3.0.4-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-bigdecimal","fixed_in":["3.0.0-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-bundler","fixed_in":["2.2.33-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-io-console","fixed_in":["0.5.7-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-irb","fixed_in":["1.3.5-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-json","fixed_in":["2.5.1-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-minitest","fixed_in":["5.14.2-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-power_assert","fixed_in":["1.2.0-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-psych","fixed_in":["3.3.2-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rake","fixed_in":["13.0.3-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rbs","fixed_in":["1.4.0-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rdoc","fixed_in":["6.3.3-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rexml","fixed_in":["3.3.3-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rss","fixed_in":["0.2.9-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-test-unit","fixed_in":["3.3.7-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-typeprof","fixed_in":["0.15.2-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygems","fixed_in":["3.2.33-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygems-devel","fixed_in":["3.2.33-160.el9_2.tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ruby","fixed_in":["2.0.0.648-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ruby-devel","fixed_in":["2.0.0.648-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ruby-doc","fixed_in":["2.0.0.648-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ruby-irb","fixed_in":["2.0.0.648-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ruby-libs","fixed_in":["2.0.0.648-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ruby-tcltk","fixed_in":["2.0.0.648-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rubygem-bigdecimal","fixed_in":["1.2.0-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rubygem-io-console","fixed_in":["0.4.2-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rubygem-json","fixed_in":["1.7.7-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rubygem-minitest","fixed_in":["4.3.2-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rubygem-psych","fixed_in":["2.0.0-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rubygem-rake","fixed_in":["0.9.6-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rubygem-rdoc","fixed_in":["4.0.0-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rubygems","fixed_in":["2.0.14.1-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rubygems-devel","fixed_in":["2.0.14.1-39.el7_9.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ruby3.3","fixed_in":["3.3.13-0+deb13u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ruby2.3","fixed_in":["2.3.1-2~ubuntu16.04.16+esm15"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.3"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.2"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.9-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-1.module_el8.10.0+3799+191214cc"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-1.module_el8.10.0+3799+191214cc"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.5-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.22-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.2-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.20.0-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-1.module_el8.10.0+3799+191214cc"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-1.module_el8.10.0+3799+191214cc"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1.module_el8.10.0+3799+191214cc"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1.module_el8.10.0+3799+191214cc"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-racc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.1.0-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3.1-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.9-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.22-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.22-8.module_el8.10.0+4241+4264e34b"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby4.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby4.0-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby4.0-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby4.0-rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.7-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby4.0-rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.5-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.22-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.2-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.20.0-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-racc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.1.0-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3.1-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.9-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.22-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.22-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.1-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.16-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.7-1.module_el9.8.0+232+50f6dd36"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.7-1.module_el9.8.0+232+50f6dd36"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-1.module_el9.8.0+232+50f6dd36"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-1.module_el9.8.0+232+50f6dd36"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-racc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3.1-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.4-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.2-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.5-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.31.1-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.16-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.16-34.module_el9.8.0+289+5a070f48"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.12-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.5-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.22-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.2-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.20.0-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-3.module_el9.7.0+184+e2e36072"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-3.module_el9.7.0+184+e2e36072"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-2.module_el9.7.0+245+447713a2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-2.module_el9.7.0+245+447713a2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-racc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.1.0-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3.1-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.9-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.22-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.22-8.module_el9.8.0+288+22f1c9f2"}]}],"bundled":6},{"source":"osv","ecosystem":"Azure Linux:3","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.5-8"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.2-r1"},{"fixed":"3.3.10-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.4.4-r0"},{"fixed":"3.4.9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.2-r1"},{"fixed":"3.4.9-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.33-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.7-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.2-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.3-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.4.1-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.9-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.2-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.33-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.33-165.el9_6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.33-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.7-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.2-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.3-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.3-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.9-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.2-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.33-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.33-160.el9_2.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.7-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.2-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14.1-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14.1-39.el7_9.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ruby3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2-7","3.1.2-7+deb12u1","3.1.2-7+hurd.1","3.1.2-8","3.1.2-8.1~exp1","3.1.2-8.3","3.1.2-8.4","3.1.2-8.5"]},{"source":"osv","ecosystem":"Debian:13","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.13-0+deb13u1"}]}],"versions":["3.3.8-2","3.3.8-2.1","3.3.8-2.2"]},{"source":"osv","ecosystem":"Debian:14","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.8-2","3.3.8-2.1","3.3.8-2.2"]},{"source":"osv","ecosystem":"RubyGems","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.3"}]}],"versions":["3.2.0","3.2.1","3.2.2"]},{"source":"osv","ecosystem":"RubyGems","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.2"}]}],"versions":["3.1.0","3.1.1"]},{"source":"osv","ecosystem":"RubyGems","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1"}]}],"versions":["0.0.1","0.1.0","1.0.0","1.1.0","2.0.0","2.1.0","2.1.1","3.0.0"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-149.oe2203sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-157.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-157.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-158.oe2403sp4"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.8-141.oe2003sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-bundled-gems-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bigdecimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.22-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-io-console-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.20.0-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.2-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-psych-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.2-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-racc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-racc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.1.0-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rbs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.3.1-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.4-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.1-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.9-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.22-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.22-8.module+el8.10.0+24567+c4e5368e"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby4.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby4.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby4.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby4.0-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby4.0-rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.7-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby4.0-rubygem-mysql2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.7-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby4.0-rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby4.0-rubygem-pg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby4.0-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby-bundled-gems-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-bigdecimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.22-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-io-console-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.20.0-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.2-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-psych-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.2-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-racc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-racc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.1.0-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-rbs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.3.1-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.4-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.1-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.9-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.22-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.22-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-bundled-gems-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.1-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bigdecimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.1-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.16-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.2-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-io-console-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.2-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.0-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.0-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.0-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.0-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.7-1.module+el9.8.0+24428+77f1d00a"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.7-1.module+el9.8.0+24428+77f1d00a"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.7-1.module+el9.8.0+24428+77f1d00a"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.7-1.module+el9.8.0+24428+77f1d00a"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.module+el9.8.0+24428+77f1d00a"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.module+el9.8.0+24428+77f1d00a"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.module+el9.8.0+24428+77f1d00a"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.module+el9.8.0+24428+77f1d00a"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.1-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-psych-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.1-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-racc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-racc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3.1-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rbs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.4-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.2-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.5-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.16-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.16-34.module+el9.8.0+24564+e55418dc"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-bundled-gems-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bigdecimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.22-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-io-console-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.20.0-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-3.module+el9.8.0+24356+77305e91"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-3.module+el9.8.0+24356+77305e91"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-3.module+el9.8.0+24356+77305e91"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-3.module+el9.8.0+24356+77305e91"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-2.module+el9.8.0+24356+77305e91"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-2.module+el9.8.0+24356+77305e91"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-2.module+el9.8.0+24356+77305e91"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-2.module+el9.8.0+24356+77305e91"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.2-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-psych-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.2-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-racc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-racc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.1.0-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rbs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.3.1-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.4-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.1-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.9-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.22-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.22-8.module+el9.8.0+24568+2bbebe96"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-23.1.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby3.3-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-23.1.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby3.3-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-23.1.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby3.3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-23.1.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby3.3-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-23.1.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby3.3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-23.1.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.8-31.1.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby3.4-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.8-31.1.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby3.4-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.8-31.1.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby3.4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.8-31.1.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby3.4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.8-31.1.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby3.4-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.8-31.1.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby4.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-33.3.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby4.0-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-33.3.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby4.0-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-33.3.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby4.0-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-33.3.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby4.0-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-33.3.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ruby4.0-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-33.3.hum1"}]}],"bundled":36},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el8.10.0+40269+dc93e2d1"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1679+61871737"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.5.0+668+665814fa"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.9.0+1537+0b2034bd"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1827+16ecb9d2"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1820+f3fffb92"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1826+b62220b4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-1.module+el8.10.0+1679+61871737"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-1.module+el8.10.0+1827+16ecb9d2"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el8.10.0+1679+61871737"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el8.10.0+1827+16ecb9d2"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:10","package":"ruby4.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-36.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:10","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-14.el10_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:9","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.6-34.module+el9.8.0+40271+b5850c84"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:9","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.7-1.module+el9.8.0+40094+ce01217c"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:9","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.module+el9.8.0+40094+ce01217c"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:9","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-8.module+el9.8.0+40270+7a73441e"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:9","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-3.module+el9.7.0+40032+36e56d0d"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:9","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-2.module+el9.7.0+40188+314ad260.0.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150700.24.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~ubuntu16.04.16+esm15"}]}],"versions":["2.3.0-1","2.3.0-2","2.3.0-4ubuntu2","2.3.0-4ubuntu3","2.3.0-5ubuntu1","2.3.1-2~16.04","2.3.1-2~16.04.2","2.3.1-2~16.04.4","2.3.1-2~16.04.5","2.3.1-2~16.04.6","2.3.1-2~16.04.7","2.3.1-2~16.04.9","2.3.1-2~16.04.10","2.3.1-2~16.04.11","2.3.1-2~16.04.12","2.3.1-2~ubuntu16.04.13","2.3.1-2~ubuntu16.04.14","2.3.1-2~ubuntu16.04.15","2.3.1-2~ubuntu16.04.16","2.3.1-2~ubuntu16.04.16+esm1","2.3.1-2~ubuntu16.04.16+esm2","2.3.1-2~ubuntu16.04.16+esm3","2.3.1-2~ubuntu16.04.16+esm4","2.3.1-2~ubuntu16.04.16+esm5","2.3.1-2~ubuntu16.04.16+esm6","2.3.1-2~ubuntu16.04.16+esm7","2.3.1-2~ubuntu16.04.16+esm8","2.3.1-2~ubuntu16.04.16+esm9","2.3.1-2~ubuntu16.04.16+esm10","2.3.1-2~ubuntu16.04.16+esm11","2.3.1-2~ubuntu16.04.16+esm12","2.3.1-2~ubuntu16.04.16+esm14"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.21-2ubuntu4","1.7.22-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.0~preview1-1ubuntu2","2.5.0-4ubuntu1","2.5.0-4ubuntu4","2.5.0-5ubuntu1","2.5.0-6ubuntu1","2.5.1-1ubuntu1","2.5.1-1ubuntu1.1","2.5.1-1ubuntu1.2","2.5.1-1ubuntu1.4","2.5.1-1ubuntu1.5","2.5.1-1ubuntu1.6","2.5.1-1ubuntu1.7","2.5.1-1ubuntu1.8","2.5.1-1ubuntu1.9","2.5.1-1ubuntu1.10","2.5.1-1ubuntu1.11","2.5.1-1ubuntu1.12","2.5.1-1ubuntu1.13","2.5.1-1ubuntu1.14","2.5.1-1ubuntu1.15","2.5.1-1ubuntu1.16","2.5.1-1ubuntu1.16+esm1","2.5.1-1ubuntu1.16+esm3","2.5.1-1ubuntu1.16+esm4","2.5.1-1ubuntu1.16+esm5","2.5.1-1ubuntu1.16+esm6","2.5.1-1ubuntu1.16+esm7","2.5.1-1ubuntu1.16+esm8"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.1.13.0-1","9.1.17.0-1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ruby2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.0-1","2.7.0-2","2.7.0-3","2.7.0-4","2.7.0-4ubuntu1","2.7.0-5ubuntu1","2.7.0-5ubuntu1.1","2.7.0-5ubuntu1.2","2.7.0-5ubuntu1.3","2.7.0-5ubuntu1.4","2.7.0-5ubuntu1.5","2.7.0-5ubuntu1.6","2.7.0-5ubuntu1.7","2.7.0-5ubuntu1.8","2.7.0-5ubuntu1.9","2.7.0-5ubuntu1.10","2.7.0-5ubuntu1.11","2.7.0-5ubuntu1.12","2.7.0-5ubuntu1.13","2.7.0-5ubuntu1.14","2.7.0-5ubuntu1.15","2.7.0-5ubuntu1.16","2.7.0-5ubuntu1.17","2.7.0-5ubuntu1.18","2.7.0-5ubuntu1.18+esm1","2.7.0-5ubuntu1.18+esm3","2.7.0-5ubuntu1.18+esm4","2.7.0-5ubuntu1.18+esm5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ruby3.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.2-5ubuntu1","3.0.2-7","3.0.2-7ubuntu2","3.0.2-7ubuntu2.1","3.0.2-7ubuntu2.2","3.0.2-7ubuntu2.3","3.0.2-7ubuntu2.4","3.0.2-7ubuntu2.5","3.0.2-7ubuntu2.6","3.0.2-7ubuntu2.7","3.0.2-7ubuntu2.8","3.0.2-7ubuntu2.10","3.0.2-7ubuntu2.11","3.0.2-7ubuntu2.12","3.0.2-7ubuntu2.13"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ruby3.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.3-1","3.2.3-1build2","3.2.3-1build3","3.2.3-1ubuntu0.24.04.1","3.2.3-1ubuntu0.24.04.3","3.2.3-1ubuntu0.24.04.5","3.2.3-1ubuntu0.24.04.6","3.2.3-1ubuntu0.24.04.7","3.2.3-1ubuntu0.24.04.8"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.8.0+ds-2ubuntu1","9.4.8.0+ds-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.7-1ubuntu2","3.3.8-2ubuntu1","3.3.8-2ubuntu2","3.3.8-2ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.8.0+ds-3ubuntu1","9.4.14.0+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.8-2ubuntu3","3.3.8-2.2ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.8-2ubuntu2","3.3.8-2ubuntu3","3.3.8-2ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~ubuntu16.04.16+esm15"}]}],"versions":["2.3.0-1","2.3.0-2","2.3.0-4ubuntu2","2.3.0-4ubuntu3","2.3.0-5ubuntu1","2.3.1-2~16.04","2.3.1-2~16.04.2","2.3.1-2~16.04.4","2.3.1-2~16.04.5","2.3.1-2~16.04.6","2.3.1-2~16.04.7","2.3.1-2~16.04.9","2.3.1-2~16.04.10","2.3.1-2~16.04.11","2.3.1-2~16.04.12","2.3.1-2~ubuntu16.04.13","2.3.1-2~ubuntu16.04.14","2.3.1-2~ubuntu16.04.15","2.3.1-2~ubuntu16.04.16","2.3.1-2~ubuntu16.04.16+esm1","2.3.1-2~ubuntu16.04.16+esm2","2.3.1-2~ubuntu16.04.16+esm3","2.3.1-2~ubuntu16.04.16+esm4","2.3.1-2~ubuntu16.04.16+esm5","2.3.1-2~ubuntu16.04.16+esm6","2.3.1-2~ubuntu16.04.16+esm7","2.3.1-2~ubuntu16.04.16+esm8","2.3.1-2~ubuntu16.04.16+esm9","2.3.1-2~ubuntu16.04.16+esm10","2.3.1-2~ubuntu16.04.16+esm11","2.3.1-2~ubuntu16.04.16+esm12","2.3.1-2~ubuntu16.04.16+esm14"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"ruby3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-160000.1.1"}]}],"bundled":8}],"products":[{"vendor":"ruby","product":"zlib"},{"vendor":"ruby-lang","product":"zlib"}],"references":[{"url":"https://github.com/ruby/zlib/security/advisories/GHSA-g857-hhfv-j68w","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","web","article","report"]},{"url":"https://hackerone.com/reports/3467067","tags":["x_refsource_MISC","Permissions Required","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27820","tags":["web","advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/zlib/CVE-2026-27820.yml","tags":["web"]},{"url":"https://www.ruby-lang.org/en/news/2026/03/05/buffer-overflow-zlib-cve-2026-27820","tags":["web"]},{"url":"https://github.com/advisories/GHSA-g857-hhfv-j68w"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-27820","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50728","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27820","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42256","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42257","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47240","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47241","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47242","tags":["report"]},{"url":"https://bugzilla.redhat.com/2459002","tags":["report"]},{"url":"https://bugzilla.redhat.com/2468494","tags":["report"]},{"url":"https://bugzilla.redhat.com/2468500","tags":["report"]},{"url":"https://bugzilla.redhat.com/2491519","tags":["report"]},{"url":"https://bugzilla.redhat.com/2491523","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-50728.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50773","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-50773.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50778","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-50778.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50827","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-50827.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50828","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-50828.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-27820","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1785320518.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1785428387.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1786470325.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27820.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-27820","tags":["advisory"]},{"url":"https://github.com/ruby/zlib","tags":["package"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3533","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24294","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47240","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47241","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3534","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3535","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47242","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3537","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2459002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2468494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2468500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491523","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-170929","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50728.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27820","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42256","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42256","tags":["advisory"]},{"url":"https://github.com/ruby/net-imap/commit/158d0b505074397cdb5ceb58935e42dd2bcfa612","tags":["article"]},{"url":"https://github.com/ruby/net-imap/commit/808001bc45c06f7297a7e96d341279e041a7f7f4","tags":["article"]},{"url":"https://github.com/ruby/net-imap/commit/99f59eab6064955a23debd95410263ad144df758","tags":["article"]},{"url":"https://github.com/ruby/net-imap/releases/tag/v0.4.24","tags":["article"]},{"url":"https://github.com/ruby/net-imap/releases/tag/v0.5.14","tags":["article"]},{"url":"https://github.com/ruby/net-imap/releases/tag/v0.6.4","tags":["article"]},{"url":"https://github.com/ruby/net-imap/security/advisories/GHSA-87pf-fpwv-p7m7","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42257","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42257","tags":["advisory"]},{"url":"https://github.com/ruby/net-imap/security/advisories/GHSA-hm49-wcqc-g2xg","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47240","tags":["advisory"]},{"url":"https://github.com/ruby/net-imap/security/advisories/GHSA-8p34-64r3-mwg8","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47241","tags":["advisory"]},{"url":"https://github.com/ruby/net-imap/security/advisories/GHSA-c4fp-cxrr-mj66","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47242","tags":["advisory"]},{"url":"https://github.com/ruby/net-imap/security/advisories/GHSA-46q3-7gv7-qmgg","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50773.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50778.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50827.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50828.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7305","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3905","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3657","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3656","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3655","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-27282","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-31810","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16254","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-8780","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14064","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10784","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-9096","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8090","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8080","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6438","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4975","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1821","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-5371","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4815","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-1891","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28756","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-28739","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41819","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28965","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25613","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-2725","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-2663","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-2726","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-2662","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-0188","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-2664","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3009","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2686","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2705","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-5147","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7551","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7305.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=443829","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-1891","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1891","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=450821","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-2662","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2662","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=450825","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-2663","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2663","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=450834","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-2664","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2664","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=451821","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-2725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2725","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=451828","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-2726","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2726","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458948","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3655","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3655","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3656","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3656","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458966","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3657","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3657","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461495","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3905","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3905","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1248935","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-5147","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-5147","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=682332","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-0188","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-0188","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=722415","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2686","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2686","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2705","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2705","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3009","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3009","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=750564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4815","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4815","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=875236","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5371","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5371","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=914716","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1821","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1821","tags":["advisory"]},{"url":"http://www.ruby-lang.org/en/news/2013/02/22/rexml-dos-2013-02-22/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118158","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4975","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4975","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490845","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6438","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6438","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2014/08/19/ruby-1-9-2-p330-released/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1157709","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8080","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8080","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2014/10/27/rexml-dos-cve-2014-8080/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159927","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8090","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2014/11/13/rexml-dos-cve-2014-8090/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7551","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7551","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461846","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-9096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-9096","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1492012","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10784","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487552","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14064","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/json-heap-exposure-cve-2017-14064/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561949","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8780","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8780","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2018/03/28/poisoned-nul-byte-dir-cve-2018-8780/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1789556","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16254","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883623","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25613","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25613","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2020/09/29/http-request-smuggling-cve-2020-25613/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947526","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28965","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28965","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980126","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-31810","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31810","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2021/07/07/trusting-pasv-responses-in-net-ftp/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026757","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41819","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41819","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075687","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28739","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28739","tags":["advisory"]},{"url":"http://www.ruby-lang.org/en/news/2022/04/12/buffer-overrun-in-string-to-float-cve-2022-28739/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184061","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28756","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28756","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276810","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27282","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2024/04/23/arbitrary-memory-address-read-regexp-cve-2024-27282/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7307","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7307.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8838","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8838.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:50728","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:50773","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:50778","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:50827","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:50828","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261066-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1232440","tags":["report"]},{"url":"https://bugzilla.suse.com/1232441","tags":["report"]},{"url":"https://bugzilla.suse.com/1250016","tags":["report"]},{"url":"https://bugzilla.suse.com/1259239","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27820","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-27820","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8556-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-42258","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1255833","tags":["report"]},{"url":"https://bugzilla.suse.com/1262441","tags":["report"]},{"url":"https://bugzilla.suse.com/1268011","tags":["report"]},{"url":"https://bugzilla.suse.com/1268337","tags":["report"]},{"url":"https://bugzilla.suse.com/1268338","tags":["report"]},{"url":"https://bugzilla.suse.com/1268339","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47242","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-27820","title":"zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption","description":"zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.","status":"published","published":"2026-04-16T17:27:48.944Z","modified":"2026-04-16T18:20:21.451Z","cvss":[{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","level":"low","assessor":"cna"}],"cwes":["CWE-120","CWE-131"],"updated_at":"2026-11-02T14:19:48.826324Z"}],"euvd":[{"id":"EUVD-2026-23278","description":"zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.","status":"published","published":"2026-04-16T17:27:48Z","modified":"2026-04-16T18:20:21Z","cvss":[{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","level":"low"}],"updated_at":"2026-11-02T19:24:23.841547Z"}],"ghsa":[{"id":"GHSA-g857-hhfv-j68w","title":"Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption","description":"### Details\n\nA buffer overflow vulnerability exists in `Zlib::GzipReader`.\n\nThe `zstream_buffer_ungets` function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity.\n\n### Recommended action\n\nWe recommend to update the `zlib` gem to version 3.2.3 or later. In order to ensure compatibility with bundled version in older Ruby series, you may update as follows instead:\n\n* For Ruby 3.2 users: Update to zlib 3.0.1\n* For Ruby 3.3 users: Update to zlib 3.1.2\n\nYou can use gem update zlib to update it. If you are using bundler, please add `gem \"zlib\", \"\u003e= 3.2.3\"` to your Gemfile.\n\n### Affected versions\n\nzlib gem 3.2.2 or lower\n\n### Credits\n\n[calysteon](https://hackerone.com/calysteon)\n\n### References\n\n* https://hackerone.com/reports/3467067","status":"published","published":"2026-04-16T20:40:54Z","modified":"2026-06-08T23:12:13Z","cvss":[{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","level":"medium"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:40:20.187636Z"}],"nvd":[{"id":"CVE-2026-27820","description":"zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.","status":"published","published":"2026-04-16T18:16:44.77Z","modified":"2026-10-26T21:10:00.17Z","cvss":[{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-120","CWE-131"],"updated_at":"2026-11-02T14:12:15.120927Z"}],"osv":[{"id":"ALPINE-CVE-2026-27820","description":"zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.","status":"published","published":"2026-04-16T18:16:44.77Z","modified":"2026-10-27T12:30:04.770953135Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2026-27820","status":"published","published":"2026-03-20T19:39:31.184471Z","modified":"2026-05-23T07:15:06.03402386Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:23.315185Z"},{"id":"CVE-2026-27820","title":"zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption","description":"zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.","status":"published","published":"2026-04-16T17:27:48.944Z","modified":"2026-10-28T02:30:29.57951329Z","cvss":[{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","level":"low"}],"cwes":["CWE-120","CWE-131"],"updated_at":"2026-11-02T15:45:00.180685Z"},{"id":"DEBIAN-CVE-2026-27820","description":"zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.","status":"published","published":"2026-04-16T18:16:44.77Z","modified":"2026-11-07T19:00:43.376213432Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-07T19:21:34.633914Z"},{"id":"GHSA-g857-hhfv-j68w","title":"Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption","description":"### Details\n\nA buffer overflow vulnerability exists in `Zlib::GzipReader`.\n\nThe `zstream_buffer_ungets` function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity.\n\n### Recommended action\n\nWe recommend to update the `zlib` gem to version 3.2.3 or later. In order to ensure compatibility with bundled version in older Ruby series, you may update as follows instead:\n\n* For Ruby 3.2 users: Update to zlib 3.0.1\n* For Ruby 3.3 users: Update to zlib 3.1.2\n\nYou can use gem update zlib to update it. If you are using bundler, please add `gem \"zlib\", \"\u003e= 3.2.3\"` to your Gemfile.\n\n### Affected versions\n\nzlib gem 3.2.2 or lower\n\n### Credits\n\n[calysteon](https://hackerone.com/calysteon)\n\n### References\n\n* https://hackerone.com/reports/3467067","status":"published","published":"2026-04-16T20:40:54Z","modified":"2026-09-10T03:50:44.477881992Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:46:47.472172Z"},{"id":"OESA-2026-3533","title":"ruby security update","description":"Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).\r\n\r\nSecurity Fix(es):\n\nThe attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet.\n\nAn attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses such a packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.\n\nThis resource consumption can cause the application thread to become unresponsive, resulting in a Denial of Service condition.(CVE-2025-24294)\n\nzlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.(CVE-2026-27820)\n\nNet::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a \u0026quot;raw data\u0026quot; argument that is sent verbatim after validation to prevent command injection. However, if a server does not support non-synchronizing literals, it may still be possible to inject arbitrary IMAP commands inside non-synchronizing literals.  A server without support for non-synchronizing literals may interpret the \u0026quot;+}\\r\\n\u0026quot; as the end of a malformed command line and respond with a tagged BAD. In that case, the contents of the literal will be interpreted as one or more new pipelined commands, allowing a CRLF command injection attack to succeed. This affects criteria for #search and #uid_search; search_keys for #sort, #thread, #uid_sort, and #uid_thread; and attr for #fetch and #uid_fetch. This vulnerability is fixed in 0.6.5 and 0.5.15.(CVE-2026-47240)\n\nNet::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled input, an attacker can force the next command to be absorbed as a continuation of the first command. This will cause the first command to eventually fail, but also prevents it from returning until another command is sent (from another thread). That other command will not return until the connection is closed. This vulnerability is fixed in 0.6.5 and 0.5.15.(CVE-2026-47241)","status":"published","published":"2026-08-30T04:15:19Z","modified":"2026-08-30T04:31:43.897574303Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3534","title":"ruby security update","description":"Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).\r\n\r\nSecurity Fix(es):\n\nThe attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet.\n\nAn attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses such a packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.\n\nThis resource consumption can cause the application thread to become unresponsive, resulting in a Denial of Service condition.(CVE-2025-24294)\n\nzlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.(CVE-2026-27820)","status":"published","published":"2026-08-30T04:15:20Z","modified":"2026-08-30T04:31:43.895447935Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3535","title":"ruby security update","description":"Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).\r\n\r\nSecurity Fix(es):\n\nThe attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet.\n\nAn attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses such a packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.\n\nThis resource consumption can cause the application thread to become unresponsive, resulting in a Denial of Service condition.(CVE-2025-24294)\n\nzlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.(CVE-2026-27820)","status":"published","published":"2026-08-30T04:15:22Z","modified":"2026-08-30T04:31:43.345664793Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3536","title":"ruby security update","description":"Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).\r\n\r\nSecurity Fix(es):\n\nThe attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet.\n\nAn attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses such a packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.\n\nThis resource consumption can cause the application thread to become unresponsive, resulting in a Denial of Service condition.(CVE-2025-24294)\n\nzlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.(CVE-2026-27820)\n\nNet::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a \u0026quot;raw data\u0026quot; argument that is sent verbatim after validation to prevent command injection. However, if a server does not support non-synchronizing literals, it may still be possible to inject arbitrary IMAP commands inside non-synchronizing literals.  A server without support for non-synchronizing literals may interpret the \u0026quot;+}\\r\\n\u0026quot; as the end of a malformed command line and respond with a tagged BAD. In that case, the contents of the literal will be interpreted as one or more new pipelined commands, allowing a CRLF command injection attack to succeed. This affects criteria for #search and #uid_search; search_keys for #sort, #thread, #uid_sort, and #uid_thread; and attr for #fetch and #uid_fetch. This vulnerability is fixed in 0.6.5 and 0.5.15.(CVE-2026-47240)\n\nNet::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled input, an attacker can force the next command to be absorbed as a continuation of the first command. This will cause the first command to eventually fail, but also prevents it from returning until another command is sent (from another thread). That other command will not return until the connection is closed. This vulnerability is fixed in 0.6.5 and 0.5.15.(CVE-2026-47241)\n\nNet::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAP#id is called with a hash argument, although the ID field value strings are correctly quoted (escaping quoted specials), they were not validated to prohibit CRLF sequences. While Net::IMAP#enable does process its arguments for aliases, it does not validate them as valid atoms (or as a list of valid atoms). The #to_s value is sent verbatim. Arguments to either command could be used by an attacker to inject arbitrary IMAP commands. This vulnerability is fixed in 0.6.5 and 0.5.15.(CVE-2026-47242)","status":"published","published":"2026-08-30T04:15:25Z","modified":"2026-08-30T04:32:36.29503928Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3537","title":"ruby security update","description":"Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).\r\n\r\nSecurity Fix(es):\n\nThe attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet.\n\nAn attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses such a packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.\n\nThis resource consumption can cause the application thread to become unresponsive, resulting in a Denial of Service condition.(CVE-2025-24294)\n\nzlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.(CVE-2026-27820)\n\nNet::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a \u0026quot;raw data\u0026quot; argument that is sent verbatim after validation to prevent command injection. However, if a server does not support non-synchronizing literals, it may still be possible to inject arbitrary IMAP commands inside non-synchronizing literals.  A server without support for non-synchronizing literals may interpret the \u0026quot;+}\\r\\n\u0026quot; as the end of a malformed command line and respond with a tagged BAD. In that case, the contents of the literal will be interpreted as one or more new pipelined commands, allowing a CRLF command injection attack to succeed. This affects criteria for #search and #uid_search; search_keys for #sort, #thread, #uid_sort, and #uid_thread; and attr for #fetch and #uid_fetch. This vulnerability is fixed in 0.6.5 and 0.5.15.(CVE-2026-47240)\n\nNet::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled input, an attacker can force the next command to be absorbed as a continuation of the first command. This will cause the first command to eventually fail, but also prevents it from returning until another command is sent (from another thread). That other command will not return until the connection is closed. This vulnerability is fixed in 0.6.5 and 0.5.15.(CVE-2026-47241)","status":"published","published":"2026-08-30T04:15:27Z","modified":"2026-08-30T04:32:36.294979004Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"RHSA-2026:50728","title":"Red Hat Security Advisory: ruby:3.3 security, bug fix, and enhancement update","status":"published","published":"2026-08-27T10:14:05Z","modified":"2026-10-17T10:15:14Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:50773","title":"Red Hat Security Advisory: ruby4.0 security, bug fix, and enhancement update","status":"published","published":"2026-08-27T10:14:06Z","modified":"2026-10-17T10:15:16Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:50778","title":"Red Hat Security Advisory: ruby security, bug fix, and enhancement update","status":"published","published":"2026-08-27T10:14:07Z","modified":"2026-10-17T10:15:16Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:50827","title":"Red Hat Security Advisory: ruby:4.0 security, bug fix, and enhancement update","status":"published","published":"2026-08-27T10:14:09Z","modified":"2026-10-17T10:15:18Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:50828","title":"Red Hat Security Advisory: ruby:3.3 security, bug fix, and enhancement update","status":"published","published":"2026-08-27T10:14:10Z","modified":"2026-10-17T10:15:19Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:7305","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-21T10:09:49Z","modified":"2026-10-06T10:31:19.141484354Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:7307","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-21T10:09:49Z","modified":"2026-10-06T10:31:08.987663145Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:8838","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-21T10:10:33Z","modified":"2026-10-06T10:31:10.808115812Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:50728","title":"Important: ruby:3.3 security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820)\n\n* net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257)\n\n* ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256)\n\n* net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240)\n\n* net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242)\n\n* net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241)\n\nBug Fix(es) and Enhancement(s):\n\n* ruby:3.3/ruby: Rebase to the latest Ruby 3.3 release [rhel-8] (JIRA:Rocky Linux-170929)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-27T00:01:25.860139Z","modified":"2026-08-27T00:30:03.663282064Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:50773","title":"Important: ruby4.0 security, bug fix, and enhancement update","description":"Ruby is the interpreted scripting language for quick and easy object-oriented programming.  It has many features to process text files and to do system management tasks (as in Perl).  It is simple, straight-forward, and extensible.\n\nSecurity Fix(es):\n\n* zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820)\n\n* net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257)\n\n* ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256)\n\n* net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240)\n\n* net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242)\n\n* net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241)\n\nBug Fix(es) and Enhancement(s):\n\n* ruby4.0: Rebase to the latest Ruby 4.0 release [rhel-10.2.z] (JIRA:Rocky Linux-211310)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-27T00:08:23.329016Z","modified":"2026-08-27T00:30:03.608169714Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:50778","title":"Important: ruby security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820)\n\n* net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257)\n\n* ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256)\n\n* net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240)\n\n* net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242)\n\n* net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241)\n\nBug Fix(es) and Enhancement(s):\n\n* ruby: Rebase to the latest Ruby 3.3 release [rhel-10.2.z] (JIRA:Rocky Linux-211300)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-27T00:08:23.329016Z","modified":"2026-08-27T00:30:03.628056245Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:50827","title":"Important: ruby:4.0 security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820)\n\n* net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257)\n\n* ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256)\n\n* net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240)\n\n* net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242)\n\n* net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241)\n\nBug Fix(es) and Enhancement(s):\n\n* ruby:4.0/ruby: Rebase to the latest Ruby 4.0 release [rhel-9.8.z] (JIRA:Rocky Linux-211301)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-27T00:04:44.346173Z","modified":"2026-08-27T00:30:03.590529955Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:50828","title":"Important: ruby:3.3 security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820)\n\n* net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257)\n\n* ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256)\n\n* net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240)\n\n* net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242)\n\n* net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241)\n\nBug Fix(es) and Enhancement(s):\n\n* ruby:3.3/ruby: Rebase to the latest Ruby 3.3 release [rhel-9.8.z] (JIRA:Rocky Linux-171335)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-27T00:04:44.346173Z","modified":"2026-08-27T00:30:03.625934845Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-27820","description":"zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.","status":"published","published":"2026-04-16T18:16:00Z","modified":"2026-11-11T09:39:30.760784985Z","cvss":[{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","level":"low"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-11T10:01:28.656744Z"},{"id":"ALSA-2026:50728","title":"Important: ruby:3.3 security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  \n\nSecurity Fix(es):  \n\n  * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820)\n  * net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257)\n  * ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256)\n  * net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240)\n  * net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242)\n  * net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * ruby:3.3/ruby: Rebase to the latest Ruby 3.3 release [almalinux-8] (JIRA:AlmaLinux-170929)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-05T00:00:00Z","modified":"2026-10-29T11:02:28.880325013Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:50773","title":"Important: ruby4.0 security, bug fix, and enhancement update","description":"Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible.  \n\nSecurity Fix(es):  \n\n  * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820)\n  * net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257)\n  * ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256)\n  * net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240)\n  * net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242)\n  * net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * ruby4.0: Rebase to the latest Ruby 4.0 release [almalinux-10.2.z] (JIRA:AlmaLinux-211310)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-05T00:00:00Z","modified":"2026-10-29T11:30:39.264036988Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:50778","title":"Important: ruby security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  \n\nSecurity Fix(es):  \n\n  * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820)\n  * net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257)\n  * ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256)\n  * net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240)\n  * net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242)\n  * net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * ruby: Rebase to the latest Ruby 3.3 release [almalinux-10.2.z] (JIRA:AlmaLinux-211300)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-05T00:00:00Z","modified":"2026-10-29T11:30:36.896640653Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:50827","title":"Important: ruby:4.0 security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  \n\nSecurity Fix(es):  \n\n  * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820)\n  * net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257)\n  * ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256)\n  * net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240)\n  * net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242)\n  * net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * ruby:4.0/ruby: Rebase to the latest Ruby 4.0 release [almalinux-9.8.z] (JIRA:AlmaLinux-211301)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-05T00:00:00Z","modified":"2026-10-29T11:32:36.452135859Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:50828","title":"Important: ruby:3.3 security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  \n\nSecurity Fix(es):  \n\n  * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820)\n  * net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257)\n  * ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256)\n  * net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240)\n  * net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242)\n  * net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * ruby:3.3/ruby: Rebase to the latest Ruby 3.3 release [almalinux-9.8.z] (JIRA:AlmaLinux-171335)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-05T00:00:00Z","modified":"2026-10-29T11:32:36.400363017Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"AZL-83450","title":"CVE-2026-27820 affecting package ruby for versions less than 3.3.5-8","description":"zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.","status":"published","published":"2026-04-16T18:16:44Z","modified":"2026-10-31T15:02:25Z","updated_at":"2026-11-02T15:28:10.335477Z"},{"id":"CLSA-2026-1785320518","title":"ruby: Fix of CVE-2026-27820","description":"- CVE-2026-27820: zlib: fix buffer overflow in Zlib::GzipReader#ungetc by\n  always growing the output buffer before the memmove","status":"published","published":"2026-07-29T10:22:09Z","modified":"2026-10-26T09:31:23.097605775Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1785428387","title":"ruby: Fix of CVE-2026-27820","description":"- CVE-2026-27820: zlib: fix buffer overflow in Zlib::GzipReader#ungetc by\n  always growing the output buffer before the memmove","status":"published","published":"2026-07-30T16:19:58Z","modified":"2026-10-26T09:30:29.897962498Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1786470325","title":"ruby: Fix of CVE-2026-27820","description":"- CVE-2026-27820: fix buffer overflow in Zlib::GzipReader#ungetc\n- Skip unresolvable GIDs in TestProcess#test_execopts_gid (build env workaround)","status":"published","published":"2026-08-13T12:42:16Z","modified":"2026-10-26T09:31:42.607078284Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"openSUSE-SU-2026:21878-1","title":"Security update for ruby3.4","description":"This update for ruby3.4 fixes the following issues:\n\n- CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations (bsc#1250016).\n- CVE-2026-27820: insufficient checks in `zstream_buffer_ungets` can lead to a buffer overflow (bsc#1259239).\n- CVE-2026-41316: erb: @_init deserialization guard bypass via def_module / def_method / def_class (bsc#1262441).\n- CVE-2026-42258: ruby: Net:IMAP: IMAP Command Injection via Symbol Arguments (bsc#1268011).\n- CVE-2026-47240: Net:IMAP: Command Injection via non-synchronizing literal in \"raw\" argument (bsc#1268337).\n- CVE-2026-47241: Net:IMAP: Denial of Service via incomplete raw argument validation (bsc#1268338).\n- CVE-2026-47242: Net:IMAP: Command Injection via ID and ENABLE command arguments (bsc#1268339).\n- CVE-2025-61594: rubygem-uri: URI concatenation with the plus operator can cause credential disclosure (bsc#1255833).\n\nChanges for ruby3.4:\n\n- Update to 3.4.10.\n\n- Update to 3.4.9:\n\n - Bug #21715: Miscompilation on x86-64-v2 due to undefined\n behavior in search_nonascii in string.c - Ruby - Ruby Issue\n Tracking System\n - Bug #21787: IO::Buffer Integer Overflow in Range Validation\n Leads to Out-of-Bounds Memory Access - Ruby - Ruby Issue\n - Bug #21757: Splatted args array is mutated when passing\n unexpected kwargs - Ruby - Ruby Issue Tracking System\n - Bug #21326: Instruction generation differences between parse.y\n and prism for def a(x, ...); b(...); end - Ruby - Ruby Issue\n - Bug #21814: 0.pow(2,-9999999999999999990) should be zero - Ruby\n - Ruby Issue Tracking System\n - Bug #21819: A Data object should be frozen even if it has no\n members - Ruby - Ruby Issue Tracking System\n - Bug #21811: Fix underflow in Array#pack - Ruby - Ruby Issue\n - Bug #21838: Rails seeing degradation (20% slowdown) related to\n Revision 079ef92b \"Implement global allocatable slots and empty\n pages\" (from Sep 5 2024) - Ruby - Ruby Issue Tracking System\n - Bug #21931: GC Crash in String#% (backport\n 726205b354d1068147719fb42e1de743f1838ef1) - Ruby - Ruby Issue\n - Bug #21860: Process.fork: the child may deadlock on\n th-\u003einterrupt_lock in threadptr_interrupt_exec_cleanup - Ruby -\n Ruby Issue Tracking System\n - Bug #21873: UnboundMethod#== returns false for methods from\n included/extended modules - Ruby - Ruby Issue Tracking System\n\n- Update to 3.4.8:\n\n  - Bug #21629: Ruby-3.4.7 prints -Wdefault-const-init-field-unsafe\n warnings on clang / llvm 21 - Ruby - Ruby Issue Tracking System\n - Bug #21626: Backport WASI setjmp handler memory leak fixes -\n Ruby - Ruby Issue Tracking System\n - Bug #21631: Backport openssl gem bugfix releases - Ruby - Ruby\n Issue Tracking System\n - Bug #21632: Backport REXML CVE-2025-58767 fix (bsc#1250016) -\n - Bug #21644: Stack consistency error for the newrange INSN\n peephole optimization with chilled string - Ruby - Ruby Issue\n - Bug #21668: Improve performance of\n UnicodeNormalize.canonical_ordering_one - Ruby - Ruby Issue\n - Bug #21638: Ractor-local $DEBUG is not marked - Ruby - Ruby\n - Bug #21652: Marshal#dump documentation out-of-date/unclear\n regarding Data class - Ruby - Ruby Issue Tracking System\n - Bug #13671: Regexp with lookbehind and case-insensitivity\n raises RegexpError only on strings with certain characters -\n - Bug #21625: Allow IO#wait_readable together with IO#ungetc even\n in text mode - Ruby - Ruby Issue Tracking System\n - Bug #21671: Rails CI raises Assertion Failed:\n rbimpl_rstring_getmem:RB_TYPE_P(str, RUBY_T_STRING): actual\n type: 26 with \"-DENABLE_PATH_CHECK=0 -DRUBY_DEBUG=1\" enabled -\n - Update next stable version to 4.0 from 3.5 by hsbt . Pull\n Request #15146\n - Bug #21679: Segfault when ruby calls pthread_detach in\n rb_getnameinfo - Ruby - Ruby Issue Tracking System\n - Bug #21694: Crash when looking up super method from BasicObject\n - Ruby - Ruby Issue Tracking System\n - Bug #21707: Destructuring assignment of SimpleDelegator wrapped\n array bug with YJIT - Ruby - Ruby Issue Tracking System\n - Bug #21265: Crash when proc from Symbol#to_proc called outside\n refinement scope - Ruby - Ruby Issue Tracking System\n - Bug #21703: RUBY_CRASH_REPORT does not work when shelling out\n in some cases - Ruby - Ruby Issue Tracking System\n - Bug #21666: Math.lgamma(-1).should == [infinity_value, 1] fails\n with Fedora glibc-2.42.9000-8.fc44 - Ruby - Ruby Issue Tracking\n System\n - Bug #21655: segfault when building 3.3.10 with GCC 15.2.1,\n regression from 3.3.9 - Ruby - Ruby Issue Tracking System\n - Bug #21680: Integer#digits bug starting from Ruby 3.1 - Ruby -\n - Bug #21705: UNIXServer.open(nil) segfaults on Windows - Ruby -\n - Bug #21648: [prism] ruby crashes for for * in [10]; end - Ruby\n - Bug #21187: Strings concatenated with \\ getting frozen with\n literal hashes (PRISM only) - Ruby - Ruby Issue Tracking System\n - Bug #21772: ruby: YJIT has panicked StackOpnd(1) should be a\n heap object, but was ImmSymbol for VALUE(137647867319760) -\n - Bug #21446: StackOverflow when changing visibility in reopened\n refinement - Ruby - Ruby Issue Tracking System\n - Bug #21779: Do not export functions from statically linked\n extensions - Ruby - Ruby Issue Tracking System\n - Bug #21266: YJIT GC safety crash with proc objects as block\n argument - Ruby - Ruby Issue Tracking System\n","status":"published","published":"2026-09-18T13:34:12Z","modified":"2026-09-25T18:23:10.633194964Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:1066-1","title":"Security update for ruby2.5","description":"This update for ruby2.5 fixes the following issues:\n\n- CVE-2024-49761: ReDoS vulnerability in REXML gem (bsc#1232440 bsc#1232441).\n- CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations (bsc#1250016).\n- CVE-2026-27820: insufficient checks in `zstream_buffer_ungets` can lead to a buffer overflow (bsc#1259239).\n","status":"published","published":"2026-03-26T10:38:44Z","modified":"2026-03-27T08:48:27.954861Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"USN-8556-1","title":"ruby2.3 vulnerabilities","description":"It was discovered that the Net::IMAP client in Ruby did not properly\nsanitize Symbol arguments passed to IMAP commands. A remote attacker\ncontrolling a malicious IMAP server, or able to influence command\narguments, could use this to inject arbitrary IMAP commands via CRLF\nsequences. (CVE-2026-42258)\n\nIt was discovered that the Zlib::GzipReader in Ruby did not correctly\nensure sufficient buffer capacity in the zstream_buffer_ungets function.\nAn attacker could use this to craft a gzip stream that, when processed,\ncould cause a buffer overflow, resulting in memory corruption and possibly\narbitrary code execution. (CVE-2026-27820)","status":"published","published":"2026-07-16T13:54:42Z","modified":"2026-07-16T21:16:21.167448375Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}