https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1979.htmlhttps://patchthecve.com/cve/CVE-2026-1979.htmlWed, 17 Jun 2026 10:16:49 +0000MEDIUM 5.3: A flaw has been found in mruby up to 3.4.0. This affects the function mrb_vm_exec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been published and may be used. This pathttps://patchthecve.com/cve/CVE-2025-13120.htmlhttps://patchthecve.com/cve/CVE-2025-13120.htmlMon, 19 Oct 2026 13:10:00 +0000MEDIUM 5.3: A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sort_cmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is eb3https://patchthecve.com/cve/CVE-2025-12875.htmlhttps://patchthecve.com/cve/CVE-2025-12875.htmlMon, 19 Oct 2026 13:10:00 +0000MEDIUM 5.3: A weakness has been identified in mruby 3.4.0. This vulnerability affects the function ary_fill_exec of the file mrbgems/mruby-array-ext/src/array.c. Executing a manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be launched locally. The exploit has been mhttps://patchthecve.com/cve/CVE-2025-7207.htmlhttps://patchthecve.com/cve/CVE-2025-7207.htmlWed, 17 Jun 2026 10:04:31 +0000LOW 3.3: A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2. Affected is the function scope_new of the file mrbgems/mruby-compiler/core/codegen.c of the component nregs Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally.