mruby vulnerabilities and fixes

Recent CVEs affecting mruby, with upgrade or downgrade steps. 4 tracked.

mruby has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-02-06. Highest priority: CVE-2026-1979 (score 25/100).

• CVE-2025-13120 MEDIUM 5.3 UPGRADE A vulnerability has been found in mruby up to 3.4.0
• CVE-2025-12875 MEDIUM 5.3 DOWNGRADE A weakness has been identified in mruby 3.4.0
• CVE-2026-1979 MEDIUM 5.3 UPGRADE A flaw has been found in mruby up to 3.4.0
• CVE-2025-7207 LOW 3.3 UPGRADE A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2

FAQ

How do I fix mruby vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mruby being exploited right now?

None of the tracked mruby CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mruby CVE should I patch first?

CVE-2026-1979 currently ranks highest (25/100): A flaw has been found in mruby up to 3.4.0.

RSS feed for mruby · ← Back to latest CVEs