RHSA-2026:37238: ruby Red Hat

CVSS: 8.1v3.1HighPublished

Published 10-07-2026Last modified 01-09-2026

Open JSON

Vulnerability summary

RHSA-2026:37238 is a high (CVSS 8.1) vulnerability in ruby Red Hat.

Overall risk

32/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.1/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 4 · Downstream 0

CVE-2026-41316 CVE-2026-42245 CVE-2026-42246 CVE-2026-42258

Timeline

10-07-2026
PublishedVulnerability first disclosed.
01-09-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: ruby:3.3 security update

CVSS metrics

1 score · 1 source · 1 version

v3.18.1

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat42 products

ruby< 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-bundled-gems< 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-bundled-gems-debuginfo< 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-debuginfo< 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-debugsource< 0:3.3.10-6.module+el9.6.0+24475+76cce029

ruby-default-gems< 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-devel< 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-doc< 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-libs< 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-libs-debuginfo< 0:3.3.10-6.module+el9.6.0+24475+76cce029
rubygem-bigdecimal< 0:3.1.5-6.module+el9.6.0+24475+76cce029
rubygem-bigdecimal-debuginfo< 0:3.1.5-6.module+el9.6.0+24475+76cce029
rubygem-bundler< 0:2.5.22-6.module+el9.6.0+24475+76cce029
rubygem-io-console< 0:0.7.1-6.module+el9.6.0+24475+76cce029
rubygem-io-console-debuginfo< 0:0.7.1-6.module+el9.6.0+24475+76cce029
rubygem-irb< 0:1.13.1-6.module+el9.6.0+24475+76cce029
rubygem-json< 0:2.7.2-6.module+el9.6.0+24475+76cce029
rubygem-json-debuginfo< 0:2.7.2-6.module+el9.6.0+24475+76cce029
rubygem-minitest< 0:5.20.0-6.module+el9.6.0+24475+76cce029
rubygem-mysql2< 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-debuginfo< 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-debugsource< 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-doc< 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-pg< 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
rubygem-pg-debuginfo< 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
rubygem-pg-debugsource< 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
rubygem-pg-doc< 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
rubygem-power_assert< 0:2.0.3-6.module+el9.6.0+24475+76cce029
rubygem-psych< 0:5.1.2-6.module+el9.6.0+24475+76cce029
rubygem-psych-debuginfo< 0:5.1.2-6.module+el9.6.0+24475+76cce029
rubygem-racc< 0:1.7.3-6.module+el9.6.0+24475+76cce029
rubygem-racc-debuginfo< 0:1.7.3-6.module+el9.6.0+24475+76cce029
rubygem-rake< 0:13.1.0-6.module+el9.6.0+24475+76cce029
rubygem-rbs< 0:3.4.0-6.module+el9.6.0+24475+76cce029
rubygem-rbs-debuginfo< 0:3.4.0-6.module+el9.6.0+24475+76cce029
rubygem-rdoc< 0:6.6.3.1-6.module+el9.6.0+24475+76cce029
rubygem-rexml< 0:3.4.4-6.module+el9.6.0+24475+76cce029
rubygem-rss< 0:0.3.1-6.module+el9.6.0+24475+76cce029
rubygem-test-unit< 0:3.6.1-6.module+el9.6.0+24475+76cce029
rubygem-typeprof< 0:0.21.9-6.module+el9.6.0+24475+76cce029
rubygems< 0:3.5.22-6.module+el9.6.0+24475+76cce029
rubygems-devel< 0:3.5.22-6.module+el9.6.0+24475+76cce029