ruby security

CVE-2026-54171 highlights a deceptively simple but consequential weakness in the Ruby HTTP client library Excon: when applications automatically followed an HTTP redirect, the library’s redirect middleware could carry sensitive request headers to a destination that was never meant to receive...

CVE-2026-47241 is a denial-of-service flaw in Ruby’s Net::IMAP client library affecting older net-imap versions and fixed in the 0.6.5 and 0.5.15 release lines. The direct answer: patch any Ruby application, service, scheduled job, CI runner, packaged tool, or vendor bundle that includes...