Ruby 4.0.3 Released

T1Covered by 1 source · first reported by Language blogs: Rust / Go / TypeScript / Swift / Kotlin / Java / .NET / Ruby / PHP / Elixir / ISO C++ at 21 Apr, 08:45 UTC

Ruby 4.0.3 has been released. This release only contains ERB 6.0.1.1, which fixes CVE-2026-41316. If your application calls Marshal.load on untrusted data AND has both erb and activesupport loaded, please update your ERB to 4.0.3.1, 4.0.4.1, 6.0.1.1, 6.0.4 or later. You may use this Ruby 4.0.3…

devreleasessecurity

Sources

• T1Ruby 4.0.3 ReleasedLanguage blogs: Rust / Go / TypeScript / Swift / Kotlin / Java / .NET / Ruby / PHP / Elixir / ISO C++21 Apr, 08:45

Vulnerabilities

• CVE-2026-41316