Ruby Issue Tracking System

11/12/2026

08:59 AM Ruby Misc #22502: Clarify whether compiling an untrusted string into a Regexp is supported

The glibc has for example this policy about RegExps:
https://sourceware.org/git/?p=glibc.git;a=blob;f=SECURITY.md#l59 vo.x (Vit Ondruch)

09/25/2026

07:09 AM Ruby Misc #22275: Ruby::Box support plan for RubyGems and Bundler

I think that RubyGems / Bundler should not be loaded into Ruby::Box by default. I have shared a few of my thoughts with @tagomoris and based on that he implemented #22329.
But I'd like to go further. I think that it would be nice to h... vo.x (Vit Ondruch)

04/17/2026

07:22 AM Ruby Misc #22005: Missing information about CVE on cve.org

One more question. What is the process with H1 disclosure? Because to me it seems that the H1 report is still private despite being referenced in the GHSA vo.x (Vit Ondruch)

07:08 AM Ruby Misc #22005: Missing information about CVE on cve.org

Thanks. I appreciate that 🙏 vo.x (Vit Ondruch)

04/15/2026

03:31 PM Ruby Misc #22005 (Closed): Missing information about CVE on cve.org

The CVE-2026-27820 was fixed and disclosed more than one month ago:
https://www.ruby-lang.org/en/news/2026/03/05/buffer-overflow-zlib-cve-2026-27820/
However, there is still no public information on https://www.cve.org/CVERecord?id... vo.x (Vit Ondruch)

03/31/2026

06:48 PM Ruby Feature #21973: Smile argument

My email client does not like this proposal:
<img style="width: 232px;" src="clipboard-202603312047-a8wkw.png"><br>
Maybe `:))` (even bigger smile) should be considered instead? vo.x (Vit Ondruch)

03/22/2026

10:04 AM Ruby Feature #21960: Improve #backtrace to not confuse terminals

byroot (Jean Boussier) wrote in #note-6:
> I'm not 100% sure I understand what you mean.
When the backticks were changed, I have seen more broken test suites then the actual code. And the test suites typically checks error text outpu... vo.x (Vit Ondruch)

03/21/2026

07:45 PM Ruby Feature #21960: Improve #backtrace to not confuse terminals

> This however has some small backward compatibly consequences, as code parsing backtraces with regexps isn't that rare.
> ...
This is typically not the case for test suites, unfortunately vo.x (Vit Ondruch)

12/16/2025

11:26 AM Ruby Feature #6012: Proc#source_location also return the column

And RSpec were also adjusted to the new behavior AFAICT:
https://github.com/rspec/rspec/pull/282/commits/1c20fa80772ca7a1ed0512056ce7cd6a94f8e68d vo.x (Vit Ondruch)

11:25 AM Ruby Feature #6012: Proc#source_location also return the column

Just FTR, not sure how the revert is supposed to look like, but at least Pry was adjusted for the new behavior:
https://github.com/pry/pry/pull/2357
It does not benefit from columns, but I suspect the revert would somehow influence... vo.x (Vit Ondruch)