Great, Ruby next: https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/

"[..] fix several bugs in Ruby’s regular expression engine (Onigmo) that GitLab found could be used for remote code execution on GitLab servers. [..] These bugs are reached only when an application compiles a regular expression from a string that an attacker controls, for example by passing it to Regexp.new, Regexp.union or Regexp.compile, or by interpolating it into a regexp literal such as /#{input}/"