products / ruby

Ruby

Ruby (MRI) is tracked as cpe:2.3:a:ruby-lang:ruby in NVD with substantive semver-style ranges across core libraries. Example responses are illustrative.

api usage

Querying Ruby

product slugruby

version format3.0.0, 3.3.6, semver

bash

curl "https://api.attestd.io/v1/check?product=ruby&version=3.0.0" \
  -H "Authorization: Bearer $ATTESTD_KEY"

json

{
  "product": "ruby",
  "version": "3.0.0",
  "supported": true,
  "risk_state": "high",
  "risk_factors": [
    "remote_code_execution",
    "patch_available",
    "internet_exposed_service"
  ],
  "actively_exploited": false,
  "remote_exploitable": true,
  "authentication_required": false,
  "patch_available": true,
  "fixed_version": "3.0.6",
  "confidence": 0.76,
  "cve_ids": ["CVE-2023-28755", "CVE-2024-27280"],
  "last_updated": "2026-05-13T18:00:00Z",
  "supply_chain": null
}

safe version

bash

curl "https://api.attestd.io/v1/check?product=ruby&version=3.3.6" \
  -H "Authorization: Bearer $ATTESTD_KEY"

notable cves

CVE history

CVE	Description	CVSS
`CVE-2023-28755`	ReDoS in URI module with crafted user input.	7.5
`CVE-2024-27280`	Buffer overread in StringIO extension.	3.1

All products Python Perl Response Field Reference