erb vulnerabilities

1 known vulnerability in erb from Ruby. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  erb: Protection Mechanism Failure

  CVE-2026-41316Apr 24, 2026RubyEPSS 1.13%

  ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) introduced an `@_init` instance variable guard in `ERB#result` and `ERB#run` to prevent code execution when an ERB object is reconstructed via `Marshal.load` (dese