Ruby 3.3.12 Released

T1Covered by 1 source · first reported by Language blogs: Rust / Go / TypeScript / Swift / Kotlin / Java / .NET / Ruby / PHP / Elixir / ISO C++ at 16 Jul, 05:08 UTC

Ruby 3.3.12 has been released. This release includes security fixes. Please check the topics below for details. CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class This release updates the default gem erb to 4.0.3.1 and the bundled gem net-imap to 0.4.25…

devreleasessecurity

Sources

• T1Ruby 3.3.12 ReleasedLanguage blogs: Rust / Go / TypeScript / Swift / Kotlin / Java / .NET / Ruby / PHP / Elixir / ISO C++16 Jul, 05:08

Vulnerabilities

• CVE-2026-41316