kobako vulnerabilities

1 known vulnerability in kobako from Elct9620. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  kobako: Improper Control of Generation of Code

  CVE-2026-55107Sep 30, 2026Elct9620

  Kobako is a Ruby gem that embeds a Wasm-isolated mruby interpreter inside applications, allowing execution of untrusted Ruby scripts (LLM-generated code, user formulas, student submissions, third-party plugins) in-process without giving them access to host mem