Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	10.0	EPSS 0.8%	CVE-2026-55107kobako · Code Injection Critical10.0EPSS 0.8%2026-09-30CVE Database V5CVE-2026-55107 Kobako is a Ruby gem embedding a Wasm-isolated mruby interpreter to safely execute untrusted Ruby scripts. Versions from 0.1.0 up to but not including 0.9.1 contain a vulnerability allowing guest scripts to escape the sandbox and execute arbitrary Ruby code in the host process. This vulnerability is identified as CVE-2026-55107 and has been patched in version 0.9.1. EPSS 0.8%Vulnerability elct9620 #cwe-94 #cwe-470	CVE Database V5	2026-09-30

Showing 1–1 of 1 result