CVE-2026-41316: ERB has an @_init deserialization guard bypass via def_module / def_method / def_class

Deferred

AliasesSUSE-SU-2026:3556-1RHSA-2026:18030RHSA-2026:18039+85 more

Published 24-04-2026Last modified 24-08-2026

Vulnerability summary

CVE-2026-41316 is a high (CVSS 8.1) Protection Mechanism Failure vulnerability in ruby erb. EPSS estimates a 1.13% chance of exploitation in the next 30 days, higher than 66.4% of scored vulnerabilities.

Priority

Prioritisesevere

Severe, CVSS 8.1 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 1% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?

CVSS score

8.1/10

010

High · v3.1 (CVE.org)

EPSS score

1.13%

0%100%

Low · -0.17 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6 · Related 2

OPENSUSE-SU-2026:21878-1 RHSA-2026:20596 RHSA-2026:20606 RHSA-2026:33462 RHSA-2026:35834 RHSA-2026:37238+1 more

Timeline

24-04-2026
PublishedVulnerability first disclosed.
24-08-2026
Last modifiedVulnerability information updated.

Description

ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) introduced an `@_init` instance variable guard in `ERB#result` and `ERB#run` to prevent code execution when an ERB object is reconstructed via `Marshal.load` (deserialization). However, three other public methods that also evaluate `@src` via `eval()` were not given the same guard: `ERB#def_method`, `ERB#def_module`, and `ERB#def_class`. An attacker who can trigger `Marshal.load` on untrusted data in a Ruby application that has `erb` loaded can use `ERB#def_module` (zero-arg, default parameters) as a code execution sink, bypassing the `@_init` protection entirely. ERB 4.0.3.1, 4.0.4.1, 6.0.1.1, and 6.0.4 patch the issue.

CVSS metrics

9 scores · 9 sources · 1 version

v3.18.1

EPSS trend

Probability

1.13%

Chance of exploitation in the next 30 days

Percentile

66%

Versus all other CVEs

30-day change

Decrease -0.17 pp

From 1.31% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat44 products

ruby< 0:3.3.10-11.el10_0.1 | < 0:3.3.10-6.module+el9.7.0+24248+66578cbb | < 0:3.0.7-166.el9_7 | < 0:3.3.10-12.el10_1 | < 0:3.3.10-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.0.4-160.2.el9_0 | < 0:3.0.7-162.el9_4.2 | < 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
ruby-bundled-gems< 0:3.3.10-11.el10_0.1 | < 0:3.3.10-6.module+el9.7.0+24248+66578cbb | < 0:3.3.10-12.el10_1 | < 0:3.3.10-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
ruby-bundled-gems-debuginfo< 0:3.3.10-11.el10_0.1 | < 0:3.3.10-6.module+el9.7.0+24248+66578cbb | < 0:3.3.10-12.el10_1 | < 0:3.3.10-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
ruby-debuginfo< 0:3.3.10-11.el10_0.1 | < 0:3.3.10-6.module+el9.7.0+24248+66578cbb | < 0:3.0.7-166.el9_7 | < 0:3.3.10-12.el10_1 | < 0:3.3.10-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.0.4-160.2.el9_0 | < 0:3.0.7-162.el9_4.2 | < 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
ruby-debugsource< 0:3.3.10-11.el10_0.1 | < 0:3.3.10-6.module+el9.7.0+24248+66578cbb | < 0:3.0.7-166.el9_7 | < 0:3.3.10-12.el10_1 | < 0:3.3.10-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.0.4-160.2.el9_0 | < 0:3.0.7-162.el9_4.2 | < 0:3.3.10-6.module+el9.4.0+24333+ed4ca411

ruby-default-gems< 0:3.3.10-11.el10_0.1 | < 0:3.3.10-6.module+el9.7.0+24248+66578cbb | < 0:3.0.7-166.el9_7 | < 0:3.3.10-12.el10_1 | < 0:3.3.10-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.0.4-160.2.el9_0 | < 0:3.0.7-162.el9_4.2 | < 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
ruby-devel< 0:3.3.10-11.el10_0.1 | < 0:3.3.10-6.module+el9.7.0+24248+66578cbb | < 0:3.0.7-166.el9_7 | < 0:3.3.10-12.el10_1 | < 0:3.3.10-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.0.4-160.2.el9_0 | < 0:3.0.7-162.el9_4.2 | < 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
ruby-doc< 0:3.3.10-11.el10_0.1 | < 0:3.3.10-6.module+el9.7.0+24248+66578cbb | < 0:3.0.7-166.el9_7 | < 0:3.3.10-12.el10_1 | < 0:3.3.10-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
ruby-libs< 0:3.3.10-11.el10_0.1 | < 0:3.3.10-6.module+el9.7.0+24248+66578cbb | < 0:3.0.7-166.el9_7 | < 0:3.3.10-12.el10_1 | < 0:3.3.10-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.0.4-160.2.el9_0 | < 0:3.0.7-162.el9_4.2 | < 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
ruby-libs-debuginfo< 0:3.3.10-11.el10_0.1 | < 0:3.3.10-6.module+el9.7.0+24248+66578cbb | < 0:3.0.7-166.el9_7 | < 0:3.3.10-12.el10_1 | < 0:3.3.10-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.0.4-160.2.el9_0 | < 0:3.0.7-162.el9_4.2 | < 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
rubygem-abrt< 0:0.4.0-1.module+el8.10.0+21226+b78a28c4
rubygem-abrt-doc< 0:0.4.0-1.module+el8.10.0+21226+b78a28c4
rubygem-bigdecimal< 0:3.1.5-11.el10_0.1 | < 0:3.1.5-6.module+el9.7.0+24248+66578cbb | < 0:3.0.0-166.el9_7 | < 0:3.1.5-12.el10_1 | < 0:3.1.5-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.0.0-160.2.el9_0 | < 0:3.0.0-162.el9_4.2 | < 0:3.1.5-6.module+el9.4.0+24333+ed4ca411
rubygem-bigdecimal-debuginfo< 0:3.1.5-11.el10_0.1 | < 0:3.1.5-6.module+el9.7.0+24248+66578cbb | < 0:3.0.0-166.el9_7 | < 0:3.1.5-12.el10_1 | < 0:3.1.5-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.0.0-160.2.el9_0 | < 0:3.0.0-162.el9_4.2 | < 0:3.1.5-6.module+el9.4.0+24333+ed4ca411
rubygem-bundler< 0:2.5.22-11.el10_0.1 | < 0:2.5.22-6.module+el9.7.0+24248+66578cbb | < 0:2.2.33-166.el9_7 | < 0:2.5.22-12.el10_1 | < 0:2.5.22-6.module+el8.10.0+24247+b74f0fb8 | < 0:2.2.33-160.2.el9_0 | < 0:2.2.33-162.el9_4.2 | < 0:2.5.22-6.module+el9.4.0+24333+ed4ca411
rubygem-io-console< 0:0.7.1-11.el10_0.1 | < 0:0.7.1-6.module+el9.7.0+24248+66578cbb | < 0:0.5.7-166.el9_7 | < 0:0.7.1-12.el10_1 | < 0:0.7.1-6.module+el8.10.0+24247+b74f0fb8 | < 0:0.5.7-160.2.el9_0 | < 0:0.5.7-162.el9_4.2 | < 0:0.7.1-6.module+el9.4.0+24333+ed4ca411
rubygem-io-console-debuginfo< 0:0.7.1-11.el10_0.1 | < 0:0.7.1-6.module+el9.7.0+24248+66578cbb | < 0:0.5.7-166.el9_7 | < 0:0.7.1-12.el10_1 | < 0:0.7.1-6.module+el8.10.0+24247+b74f0fb8 | < 0:0.5.7-160.2.el9_0 | < 0:0.5.7-162.el9_4.2 | < 0:0.7.1-6.module+el9.4.0+24333+ed4ca411
rubygem-irb< 0:1.13.1-11.el10_0.1 | < 0:1.13.1-6.module+el9.7.0+24248+66578cbb | < 0:1.3.5-166.el9_7 | < 0:1.13.1-12.el10_1 | < 0:1.13.1-6.module+el8.10.0+24247+b74f0fb8 | < 0:1.3.5-160.2.el9_0 | < 0:1.3.5-162.el9_4.2 | < 0:1.13.1-6.module+el9.4.0+24333+ed4ca411
rubygem-json< 0:2.7.2-11.el10_0.1 | < 0:2.7.2-6.module+el9.7.0+24248+66578cbb | < 0:2.5.1-166.el9_7 | < 0:2.7.2-12.el10_1 | < 0:2.7.2-6.module+el8.10.0+24247+b74f0fb8 | < 0:2.5.1-160.2.el9_0 | < 0:2.5.1-162.el9_4.2 | < 0:2.7.2-6.module+el9.4.0+24333+ed4ca411
rubygem-json-debuginfo< 0:2.7.2-11.el10_0.1 | < 0:2.7.2-6.module+el9.7.0+24248+66578cbb | < 0:2.5.1-166.el9_7 | < 0:2.7.2-12.el10_1 | < 0:2.7.2-6.module+el8.10.0+24247+b74f0fb8 | < 0:2.5.1-160.2.el9_0 | < 0:2.5.1-162.el9_4.2 | < 0:2.7.2-6.module+el9.4.0+24333+ed4ca411
rubygem-minitest< 0:5.20.0-11.el10_0.1 | < 0:5.20.0-6.module+el9.7.0+24248+66578cbb | < 0:5.14.2-166.el9_7 | < 0:5.20.0-12.el10_1 | < 0:5.20.0-6.module+el8.10.0+24247+b74f0fb8 | < 0:5.14.2-160.2.el9_0 | < 0:5.14.2-162.el9_4.2 | < 0:5.20.0-6.module+el9.4.0+24333+ed4ca411
rubygem-mysql2< 0:0.5.5-3.module+el9.7.0+24119+ccc80daf | < 0:0.5.5-1.module+el8.10.0+21226+b78a28c4 | < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-debuginfo< 0:0.5.5-3.module+el9.7.0+24119+ccc80daf | < 0:0.5.5-1.module+el8.10.0+21226+b78a28c4 | < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-debugsource< 0:0.5.5-3.module+el9.7.0+24119+ccc80daf | < 0:0.5.5-1.module+el8.10.0+21226+b78a28c4 | < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-doc< 0:0.5.5-3.module+el9.7.0+24119+ccc80daf | < 0:0.5.5-1.module+el8.10.0+21226+b78a28c4 | < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-pg< 0:1.5.4-2.module+el9.7.0+24119+ccc80daf | < 0:1.5.4-1.module+el8.10.0+21226+b78a28c4 | < 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
rubygem-pg-debuginfo< 0:1.5.4-2.module+el9.7.0+24119+ccc80daf | < 0:1.5.4-1.module+el8.10.0+21226+b78a28c4 | < 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
rubygem-pg-debugsource< 0:1.5.4-2.module+el9.7.0+24119+ccc80daf | < 0:1.5.4-1.module+el8.10.0+21226+b78a28c4 | < 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
rubygem-pg-doc< 0:1.5.4-2.module+el9.7.0+24119+ccc80daf | < 0:1.5.4-1.module+el8.10.0+21226+b78a28c4 | < 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
rubygem-power_assert< 0:2.0.3-11.el10_0.1 | < 0:2.0.3-6.module+el9.7.0+24248+66578cbb | < 0:1.2.1-166.el9_7 | < 0:2.0.3-12.el10_1 | < 0:2.0.3-6.module+el8.10.0+24247+b74f0fb8 | < 0:1.2.0-160.2.el9_0 | < 0:1.2.1-162.el9_4.2 | < 0:2.0.3-6.module+el9.4.0+24333+ed4ca411
rubygem-psych< 0:5.1.2-11.el10_0.1 | < 0:5.1.2-6.module+el9.7.0+24248+66578cbb | < 0:3.3.2-166.el9_7 | < 0:5.1.2-12.el10_1 | < 0:5.1.2-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.3.2-160.2.el9_0 | < 0:3.3.2-162.el9_4.2 | < 0:5.1.2-6.module+el9.4.0+24333+ed4ca411
rubygem-psych-debuginfo< 0:5.1.2-11.el10_0.1 | < 0:5.1.2-6.module+el9.7.0+24248+66578cbb | < 0:3.3.2-166.el9_7 | < 0:5.1.2-12.el10_1 | < 0:5.1.2-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.3.2-160.2.el9_0 | < 0:3.3.2-162.el9_4.2 | < 0:5.1.2-6.module+el9.4.0+24333+ed4ca411
rubygem-racc< 0:1.7.3-11.el10_0.1 | < 0:1.7.3-6.module+el9.7.0+24248+66578cbb | < 0:1.7.3-12.el10_1 | < 0:1.7.3-6.module+el8.10.0+24247+b74f0fb8 | < 0:1.7.3-6.module+el9.4.0+24333+ed4ca411
rubygem-racc-debuginfo< 0:1.7.3-11.el10_0.1 | < 0:1.7.3-6.module+el9.7.0+24248+66578cbb | < 0:1.7.3-12.el10_1 | < 0:1.7.3-6.module+el8.10.0+24247+b74f0fb8 | < 0:1.7.3-6.module+el9.4.0+24333+ed4ca411
rubygem-rake< 0:13.1.0-11.el10_0.1 | < 0:13.1.0-6.module+el9.7.0+24248+66578cbb | < 0:13.0.3-166.el9_7 | < 0:13.1.0-12.el10_1 | < 0:13.1.0-6.module+el8.10.0+24247+b74f0fb8 | < 0:13.0.3-160.2.el9_0 | < 0:13.0.3-162.el9_4.2 | < 0:13.1.0-6.module+el9.4.0+24333+ed4ca411
rubygem-rbs< 0:3.4.0-11.el10_0.1 | < 0:3.4.0-6.module+el9.7.0+24248+66578cbb | < 0:1.4.0-166.el9_7 | < 0:3.4.0-12.el10_1 | < 0:3.4.0-6.module+el8.10.0+24247+b74f0fb8 | < 0:1.4.0-160.2.el9_0 | < 0:1.4.0-162.el9_4.2 | < 0:3.4.0-6.module+el9.4.0+24333+ed4ca411
rubygem-rbs-debuginfo< 0:3.4.0-11.el10_0.1 | < 0:3.4.0-6.module+el9.7.0+24248+66578cbb | < 0:3.4.0-12.el10_1 | < 0:3.4.0-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.4.0-6.module+el9.4.0+24333+ed4ca411
rubygem-rdoc< 0:6.6.3.1-11.el10_0.1 | < 0:6.6.3.1-6.module+el9.7.0+24248+66578cbb | < 0:6.3.4.1-166.el9_7 | < 0:6.6.3.1-12.el10_1 | < 0:6.6.3.1-6.module+el8.10.0+24247+b74f0fb8 | < 0:6.3.3-160.2.el9_0 | < 0:6.3.4.1-162.el9_4.2 | < 0:6.6.3.1-6.module+el9.4.0+24333+ed4ca411
rubygem-rexml< 0:3.4.4-11.el10_0.1 | < 0:3.4.4-6.module+el9.7.0+24248+66578cbb | < 0:3.2.5-166.el9_7 | < 0:3.4.4-12.el10_1 | < 0:3.4.4-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.2.5-160.2.el9_0 | < 0:3.2.5-162.el9_4.2 | < 0:3.4.4-6.module+el9.4.0+24333+ed4ca411
rubygem-rss< 0:0.3.1-11.el10_0.1 | < 0:0.3.1-6.module+el9.7.0+24248+66578cbb | < 0:0.2.9-166.el9_7 | < 0:0.3.1-12.el10_1 | < 0:0.3.1-6.module+el8.10.0+24247+b74f0fb8 | < 0:0.2.9-160.2.el9_0 | < 0:0.2.9-162.el9_4.2 | < 0:0.3.1-6.module+el9.4.0+24333+ed4ca411
rubygem-test-unit< 0:3.6.1-11.el10_0.1 | < 0:3.6.1-6.module+el9.7.0+24248+66578cbb | < 0:3.3.7-166.el9_7 | < 0:3.6.1-12.el10_1 | < 0:3.6.1-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.3.7-160.2.el9_0 | < 0:3.3.7-162.el9_4.2 | < 0:3.6.1-6.module+el9.4.0+24333+ed4ca411
rubygem-typeprof< 0:0.21.9-11.el10_0.1 | < 0:0.21.9-6.module+el9.7.0+24248+66578cbb | < 0:0.15.2-166.el9_7 | < 0:0.21.9-12.el10_1 | < 0:0.21.9-6.module+el8.10.0+24247+b74f0fb8 | < 0:0.15.2-160.2.el9_0 | < 0:0.15.2-162.el9_4.2 | < 0:0.21.9-6.module+el9.4.0+24333+ed4ca411
rubygems< 0:3.5.22-11.el10_0.1 | < 0:3.5.22-6.module+el9.7.0+24248+66578cbb | < 0:3.2.33-166.el9_7 | < 0:3.5.22-12.el10_1 | < 0:3.5.22-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.2.33-160.2.el9_0 | < 0:3.2.33-162.el9_4.2 | < 0:3.5.22-6.module+el9.4.0+24333+ed4ca411
rubygems-devel< 0:3.5.22-11.el10_0.1 | < 0:3.5.22-6.module+el9.7.0+24248+66578cbb | < 0:3.2.33-166.el9_7 | < 0:3.5.22-12.el10_1 | < 0:3.5.22-6.module+el8.10.0+24247+b74f0fb8 | < 0:3.2.33-160.2.el9_0 | < 0:3.2.33-162.el9_4.2 | < 0:3.5.22-6.module+el9.4.0+24333+ed4ca411

Show all 44

Chainguard37 products

jruby-10.1< 10.1.1.0-r0
jruby-9.4< 9.4.15.0-r0
logstash-8.19< 8.19.19-r0
logstash-8.19-iamguarded-compat< 8.19.19-r0
logstash-8.19-with-output-opensearch< 8.19.19-r0

Show all 37

Wolfi13 products

jruby-10.1< 10.1.1.0-r0
jruby-9.4< 9.4.15.0-r0
logstash-9.3< 9.3.4-r2
logstash-9.3-iamguarded-compat< 9.3.4-r2
logstash-9.3-with-output-opensearchAll versions (No fix recorded)

Show all 13

Ubuntu7 products

jrubyAll versions (No fix recorded)
ruby2.3All versions (No fix recorded)
ruby2.5All versions (No fix recorded)
ruby2.7All versions (No fix recorded)
ruby3.0All versions (No fix recorded)

Show all 7

Debian2 products

ruby3.1All versions (No fix recorded)
ruby3.3All versions (No fix recorded)

Alpine1 product

ruby< 3.3.13-r0

Opensuse1 product

ruby4.0&distro=openSUSE Tumbleweed< 4.0.3-1.1

Ruby1 product

erb< 4.0.3.1 | = 4.0.4 | ≥ 5.0.0, < 6.0.1.1 | ≥ 6.0.2, < 6.0.4

RubyGems1 product

erb< 4.0.3.1 | ≥ 4.0.4, < 4.0.4.1 | ≥ 5.0.0, < 6.0.1.1 | ≥ 6.0.2, < 6.0.4

Suse1 product

ruby2.5&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7< 2.5.9-150700.24.11.1

10 vendors · 108 products

References

37 links

github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhvX Refsource CONFIRMARTICLEREPORTAdvisoryWEB
access.redhat.com/security/cve/CVE-2026-41316VDB EntryX Refsource REDHATREPORTAdvisory
bugzilla.redhat.com/show_bug.cgi?id=2461369Issue TrackingX Refsource REDHATREPORT
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.jsonX Sadp Csaf VexWEB
access.redhat.com/errata/RHSA-2026:33478Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:18065Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:20606Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:20614Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:20670Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:35834Vendor AdvisoryX Refsource REDHATAdvisory

Show all 37 references

access.redhat.com/errata/RHSA-2026:26312Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:26655Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:33462Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:37238Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:18039Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:18030Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:20596Vendor AdvisoryX Refsource REDHATAdvisory
www.suse.com/support/update/announcement/2026/suse-su-20263556-1/Advisory
bugzilla.suse.com/1262441REPORT
www.suse.com/security/cve/CVE-2026-41316WEB
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18030.jsonAdvisory
www.cve.org/CVERecord?id=CVE-2026-41316AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2026-41316Advisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18039.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18065.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20614.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20670.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26312.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26655.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33478.jsonAdvisory
ubuntu.com/security/CVE-2026-41316REPORT
security-tracker.debian.org/tracker/CVE-2026-41316Advisory
github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41316.jsonAdvisory
github.com/ruby/erbPACKAGE
github.com/rubysec/ruby-advisory-db/blob/master/gems/erb/CVE-2026-41316.ymlWEB
security.alpinelinux.org/vuln/CVE-2026-41316Advisory