VYPR

rubygem-safemode

by Red Hat

CVEs (1)

  • CVE-2026-107360CriNov 12, 2026
    risk 0.62cvss 9.6epss —

    A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed…