Post · Fedizen

Deborah Pickett

@futzle@old.mermaid.town 3 days ago

At least Ruby doesn't have a show-stopping CVE today.

0 Boosts

0 Likes

Deborah Pickett

@futzle@old.mermaid.town 2 hr. ago

GODDAMMIT https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/

Ruby Programming Language

Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264 | Ruby

We have released Ruby 4.0.9, 3.4.12 and 3.3.13. They fix several bugs in Ruby’s regular expression engine (Onigmo) that GitLab found could be used for remote...

@ozjonty@techhub.social 1 hr. ago

@futzle CC @duncan_bayne

@keefmarshall@mastodon.online 2 hr. ago

Who is compiling regexes from unsanitised user-entered content anyway?!

@mrowe@aus.social 3 days ago

@futzle npm has joined the chat

@mrowe@aus.social 2 days ago

@futzle goddamnit I was only joking! https://nodejs.org/en/blog/vulnerability/october-2026-security-releases (although to be fair that's not really a different new thing)

Node.js — Wednesday, October 21, 2026 Security Releases

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

Deborah Pickett

@futzle@old.mermaid.town 2 days ago

@mrowe You had a 50-50 chance with that first toot, let’s be honest.

@mrowe@aus.social 2 days ago

@futzle Indeed.

@mensrea@freeradical.zone 3 days ago

@futzle ... so far

@stufromoz@aus.social 3 days ago

@futzle don’t tempt them

@brad@bne.social 3 days ago

@futzle Now you've done it.