Ruby regexp security fixes: a newsflash

#​823 — October 23, 2026 Read on the Web Ruby Weekly Ruby regexp security fixes Who needs to update? It's very rare I'll do an out-of-band issue of Ruby Weekly but after digging into today's security releases of CRuby, I felt it was prudent to spread the word. Ruby 4.0.9 , 3.4.12 , and 3.3.13 have all been released today with fixes for regexp bugs behind four GitLab-assigned CVEs. If you can update, do so. But I'll explain what the issues are below and you can determine if they affect you. Ta...