We published security advisory for CVE-2026-41316. CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class A deserialization vulnerability exists in ERB. This vulnerability has been assigned the CVE identifier CVE-2026-41316 .
CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class
calendar_today
April 21, 2026
domain
ruby