ruby-vips: Ruby Binding for libvips
ruby-vips is the Ruby binding for the libvips image processing library. Version 2.2.1 or later is required to mitigate CVE-2026-66066 by calling…
Tag: Ruby
GitHub Introduces 3-Day Dependabot Cooldown to Mitigate Poisoned Package Attacks
GitHub has announced a new cooldown mechanism for Dependabot that introduces a mandatory three-day waiting period before opening pull requests for version…
Ruby: Dynamic Programming Language
Ruby is a dynamic, open-source programming language with a focus on simplicity and productivity. Its package ecosystem has implemented cooldown mechanisms to…
Oj: High-Performance JSON Parser for Ruby
Oj is a JSON parser and generator for Ruby, optimized for speed with native C code. Versions 3.13.0 through 3.17.1 are vulnerable…
RubyGems: Package Registry Targeted by Typosquatting
RubyGems is the official package registry for Ruby. It was targeted by a typosquatting campaign that exploited package name reuse and unvalidated…