Veille CVE

Juillet 2026

2 CVE

  1. CVE-2026-38976 7.5 Élevée

    mrubyc through 3.4.1 was found to contain a NULL pointer dereference in src/vm.c in op_super() / OP_SUPER due to a missing runtime guard for top-level super.

  2. CVE-2026-38973 4.4 Moyenne

    mrubyc through release3.4.1 was found to contain an out-of-bounds read in builtin missing-method lookup inside mrbc_find_method().