mruby
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-4996 | 3.1.0 | mruby bigint.c udiv floating point comparison with incorrect operator | MEDIUM 6.9 | 0.6 % | ||
| CVE-2026-1979 | 3.0 ; 3.1 ; 3.2 ; … | mruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free | MEDIUM 4.8 | 0.2 % | ||
| CVE-2025-13120 | 3.0 ; 3.1 ; 3.2 ; … | mruby array.c sort_cmp use after free | MEDIUM 4.8 | 0.2 % | ||
| CVE-2025-12875 | 3.4.0 | mruby array.c ary_fill_exec out-of-bounds write | MEDIUM 4.8 | 0.2 % | ||
| CVE-2025-7207 | 3.4.0-rc1 ; 3.4.0-rc2 | mruby nregs codegen.c scope_new heap-based overflow | MEDIUM 4.8 | 0.3 % |