Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to address three bugs in Onigmo, the regular expression engine embedded in the language. These three bugs are responsible for four critical remote code execution (RCE) vulnerabilities that GitLab patched over the past month. The flaws allow a specially crafted regex pattern to corrupt memory during Ruby's compilation process, potentially enabling code execution on GitLab's servers. The vulnerability chain highlights a supply chain risk where a language-level bug propagates to dependent platforms. GitLab users and Ruby developers are strongly encouraged to update to the patched versions immediately. The severity is considered critical given the RCE potential on widely-used DevOps infrastructure.