RHSA-2026:20596

Advisory lineage Upstream: 2 Downstream: 0
Published: 26 May 2026, 10:07
Last modified:22 Aug 2026, 10:18

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.1 CRITICAL
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 May 2026, 10:07
Published
Vulnerability first disclosed
22 Aug 2026, 10:18
Last Modified
Vulnerability information updated

Description

Red Hat Security Advisory: ruby:4.0 security update

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected Systems

  • redhat•ruby

    < 0:4.0.3-32.module+el9.8.0+24280+122d8796

  • redhat•ruby-bundled-gems

    < 0:4.0.3-32.module+el9.8.0+24280+122d8796

  • redhat•ruby-bundled-gems-debuginfo

    < 0:4.0.3-32.module+el9.8.0+24280+122d8796

  • redhat•ruby-debuginfo

    < 0:4.0.3-32.module+el9.8.0+24280+122d8796

  • redhat•ruby-debugsource

    < 0:4.0.3-32.module+el9.8.0+24280+122d8796

  • redhat•ruby-default-gems

    < 0:4.0.3-32.module+el9.8.0+24280+122d8796

  • redhat•ruby-devel

    < 0:4.0.3-32.module+el9.8.0+24280+122d8796

  • redhat•ruby-doc

    < 0:4.0.3-32.module+el9.8.0+24280+122d8796

  • redhat•ruby-libs

    < 0:4.0.3-32.module+el9.8.0+24280+122d8796

  • redhat•ruby-libs-debuginfo

    < 0:4.0.3-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-bigdecimal

    < 0:4.0.1-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-bigdecimal-debuginfo

    < 0:4.0.1-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-bundler

    < 0:4.0.6-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-io-console

    < 0:0.8.2-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-io-console-debuginfo

    < 0:0.8.2-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-irb

    < 0:1.16.0-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-json

    < 0:2.18.0-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-json-debuginfo

    < 0:2.18.0-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-minitest

    < 0:6.0.0-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-mysql2

    < 0:0.5.7-1.module+el9.8.0+24280+122d8796

  • redhat•rubygem-mysql2-debuginfo

    < 0:0.5.7-1.module+el9.8.0+24280+122d8796

  • redhat•rubygem-mysql2-debugsource

    < 0:0.5.7-1.module+el9.8.0+24280+122d8796

  • redhat•rubygem-mysql2-doc

    < 0:0.5.7-1.module+el9.8.0+24280+122d8796

  • redhat•rubygem-pg

    < 0:1.6.3-1.module+el9.8.0+24280+122d8796

  • redhat•rubygem-pg-debuginfo

    < 0:1.6.3-1.module+el9.8.0+24280+122d8796

  • redhat•rubygem-pg-debugsource

    < 0:1.6.3-1.module+el9.8.0+24280+122d8796

  • redhat•rubygem-pg-doc

    < 0:1.6.3-1.module+el9.8.0+24280+122d8796

  • redhat•rubygem-power_assert

    < 0:3.0.1-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-psych

    < 0:5.3.1-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-psych-debuginfo

    < 0:5.3.1-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-racc

    < 0:1.8.1-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-racc-debuginfo

    < 0:1.8.1-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-rake

    < 0:13.3.1-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-rbs

    < 0:3.10.0-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-rbs-debuginfo

    < 0:3.10.0-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-rdoc

    < 0:7.0.3-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-rexml

    < 0:3.4.4-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-rss

    < 0:0.3.2-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-test-unit

    < 0:3.7.5-32.module+el9.8.0+24280+122d8796

  • redhat•rubygem-typeprof

    < 0:0.31.1-32.module+el9.8.0+24280+122d8796

  • redhat•rubygems

    < 0:4.0.6-32.module+el9.8.0+24280+122d8796

  • redhat•rubygems-devel

    < 0:4.0.6-32.module+el9.8.0+24280+122d8796

References (14)