Ruby

Everything Threat Times has reported about Ruby: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Critical Deserialization Flaw in Square Squash Allows Remote Code Execution

Threat TimesOct 12, 2026

An unauthenticated attacker can trigger arbitrary Ruby code execution in Square Squash by storing crafted YAML data via a public API endpoint.

Vulnerabilities

Critical OS Command Injection Flaw Found in Ruby image_optimizer Gem

Threat TimesOct 8, 2026

A critical vulnerability in the image_optimizer Ruby gem allows attackers to execute arbitrary commands via crafted file paths.