Ruby: Remote code execution

Ruby: Remote code execution A vulnerability has been discovered in Ruby, possibly allowing remote code execution. erb,ruby 2026-09-12 2026-09-12 979773 remote 3.3.12 3.4.10 4.0.6 3.3.12 3.4.10 4.0.6 6.0.6 6.0.6

Ruby is an interpreted scripting language for quick and easy object-oriented programming.

A vulnerability has been discovered in Ruby. Please review the CVE identifier referenced below for details.

Remote code execution is possible.

There is no known workaround at this time.

All Ruby 3.3 users should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=dev-lang/ruby-3.3.12:3.3"

All Ruby 3.4 users should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=dev-lang/ruby-3.4.10:3.4"

All Ruby 4.0 users should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=dev-lang/ruby-4.0.6:4.0"

All ERB users should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=dev-ruby/erb-6.0.6:6"

CVE-2026-41316 GHSA-q339-8rmv-2mhv sam sam