ruby-lsp vulnerabilities

1 known vulnerability in ruby-lsp from Shopify. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  ruby-lsp: Improper Control of Generation of Code

  CVE-2026-34060Mar 31, 2026Shopify

  Ruby LSP is an implementation of the language server protocol for Ruby. Prior to Shopify.ruby-lsp version 0.10.2 and ruby-lsp version 0.26.9, the rubyLsp.branch VS Code workspace setting was interpolated without sanitization into a generated Gemfile, allowing