Vulnerability Database · OSS-Fuzz · mruby · Version
mruby 2.1.0
2.1.0 is affected by 24 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 9 Medium 9 Low 0 Unrated 6
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
mruby 2.1.0 vulnerabilities
24 vulnerabilities cover mruby 2.1.0. Scroll the table for all of them, or open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Uninitialized Value Vulnerability in mruby: Impact on Memory Management | N/A medium | 61f57b22dd76c4d2f85721417aa21c2bbc4d3e11 | 04 Oct 2024 |
| Heap-buffer-overflow in mrb_memsearch in mruby | N/A medium | 9c840a68e212fb54136b67711daff331435c1ce7 | 15 Feb 2024 |
| Heap-buffer-overflow in pack_unpack in mruby | N/A medium | 097681b4d458899dff945138ea39ae125df3e16a | 30 Sep 2023 |
| Heap-buffer-overflow in mruby | N/A medium | 393aaada64a7ec77313ef2516fce1c2052b547c8 | 19 Sep 2023 |
| Heap-use-after-free vulnerability in mruby | N/A high | 93648fc954c0133acc6e89860ba49f78ca60460f | 05 Apr 2023 |
| Heap-use-after-free vulnerability in mruby | N/A high | 8d1192f8a28034b1931a41e8c55cd86715101d0c | 14 Mar 2023 |
| Heap-use-after-free vulnerability in mruby | N/A high | 321cfe97605de8f050ac9be597069e370d5d9da3 | 28 Feb 2023 |
| Heap-buffer-overflow in udiv in mruby | N/A high | No fix published | 07 Aug 2022 |
| Heap-buffer-overflow in udiv in mruby | N/A high | 5ccca7e45b802051e00e3398ecf036f86ba92843 | 05 Aug 2022 |
| Use-of-uninitialized-value in udiv - mruby | N/A medium | 441c6ea30d52e25af56b79340b80b76763b4e453 | 02 Aug 2022 |
| Segv on unknown address in mrb_bint_cmp in mruby | N/A unrated | 26ce85bd5de515906e01fdeeac774316628ad599 | 27 Jul 2022 |
| Segv on unknown address in mrb_bint_cmp in mruby | N/A unrated | 26ce85bd5de515906e01fdeeac774316628ad599 | 26 Jul 2022 |
| Segv on unknown address in mpz_add in mruby | N/A unrated | 26ce85bd5de515906e01fdeeac774316628ad599 | 26 Jul 2022 |
| Segv on unknown address in urshift in mruby | N/A unrated | 25a32ed681cd3fc48eabd6b8efa5683b1d32ffd0 | 25 Jul 2022 |
| Segv on unknown address in mpz_add in mruby | N/A unrated | 26ce85bd5de515906e01fdeeac774316628ad599 | 25 Jul 2022 |
| Heap-buffer-overflow in mrb_funcall_with_block in mruby | N/A high | 7010ed0f0a414b1367e4620a504f106759341cc2 | 15 Oct 2021 |
| Heap-buffer-overflow in mrb_funcall_with_block in mruby | N/A high | 7010ed0f0a414b1367e4620a504f106759341cc2 | 15 Oct 2021 |
| Heap-buffer-overflow in mrb_funcall_with_block in mruby | N/A high | 7010ed0f0a414b1367e4620a504f106759341cc2 | 15 Oct 2021 |
| Heap-buffer-overflow in mrb_vm_exec | N/A high | 36efd018e2d297636a3aa2799d214a8675a14e0c | 15 Oct 2021 |
| Heap-buffer-overflow in mrb_vm_exec in mruby | N/A unrated | 0455313a9bdbe93556a8fd31b7c011dd004a6f2b | 21 Sep 2021 |
| Heap-buffer-overflow in heredoc_remove_indent in mruby | N/A medium | 94fb86f89b131814201596d301f584dfe4547526 | 14 Feb 2021 |
| UNKNOWN READ vulnerability in mruby | N/A medium | 45aa5081e418423b47a32a06e0515406f63b64d2 | 01 Jul 2020 |
| UNKNOWN READ in local_add_lv - Vulnerability in mruby | N/A medium | 7750c61e29675e778f7d12119555fafbf85043c9 | 01 Jul 2020 |
| UNKNOWN READ vulnerability in mruby | N/A medium | 264239f78fb9ec8047cf04b82f547fc41d65ab28 | 01 Jul 2020 |
Looking for another version, or everything Vulert holds for mruby?
Questions
About mruby 2.1.0
Is mruby 2.1.0 vulnerable?
Yes. 24 vulnerabilities in the Vulert database cover mruby 2.1.0: 0 critical, 9 high, 9 medium and 0 low, plus 6 not yet rated. Each entry above names the fixed version to move to.
How do I monitor mruby for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the mruby version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.