Vulnerability Database · OSS-Fuzz · mruby · Version
mruby 4.0.0-rc4
4.0.0-rc4 is affected by 28 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 9 Medium 11 Low 0 Unrated 8
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
mruby 4.0.0-rc4 vulnerabilities
28 vulnerabilities cover mruby 4.0.0-rc4. Scroll the table for all of them, or open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Uninitialized Value Vulnerability in mruby: str_escape Function | N/A medium | cafbd6691d971b110dcaedf64b37833d7a4f34cf | 31 Aug 2026 |
| Critical Check Failure in mruby: CheckUnwind Vulnerability | N/A unrated | 430e1d4f52bc98024e5a15d45c6c61efefcc1764 | 04 Aug 2026 |
| Uninitialized Value Vulnerability in mruby: Impact on Memory Management | N/A medium | 61f57b22dd76c4d2f85721417aa21c2bbc4d3e11 | 04 Oct 2024 |
| Heap-buffer-overflow in mrb_memsearch in mruby | N/A medium | 9c840a68e212fb54136b67711daff331435c1ce7 | 15 Feb 2024 |
| Heap-buffer-overflow in pack_unpack in mruby | N/A medium | 097681b4d458899dff945138ea39ae125df3e16a | 30 Sep 2023 |
| Heap-buffer-overflow in mruby | N/A medium | 393aaada64a7ec77313ef2516fce1c2052b547c8 | 19 Sep 2023 |
| Heap-use-after-free vulnerability in mruby | N/A high | 93648fc954c0133acc6e89860ba49f78ca60460f | 05 Apr 2023 |
| Heap-use-after-free vulnerability in mruby | N/A high | 8d1192f8a28034b1931a41e8c55cd86715101d0c | 14 Mar 2023 |
| Heap-use-after-free vulnerability in mruby | N/A high | 321cfe97605de8f050ac9be597069e370d5d9da3 | 28 Feb 2023 |
| Negative-size-param in mrb_str_format in mruby | N/A unrated | 6bcbfed8bb955a4412e0ca79da0244f97076ba18 | 11 Nov 2022 |
| UNKNOWN READ vulnerability in mruby | N/A medium | 9fcfd01f205fdd092be0932ac0b7a6a4eb29d2b3 | 10 Nov 2022 |
| Index-out-of-bounds in str_init_embed in mruby | N/A medium | 6bcbfed8bb955a4412e0ca79da0244f97076ba18 | 10 Nov 2022 |
| Heap-buffer-overflow in udiv in mruby | N/A high | No fix published | 07 Aug 2022 |
| Heap-buffer-overflow in udiv in mruby | N/A high | 5ccca7e45b802051e00e3398ecf036f86ba92843 | 05 Aug 2022 |
| Use-of-uninitialized-value in udiv - mruby | N/A medium | 441c6ea30d52e25af56b79340b80b76763b4e453 | 02 Aug 2022 |
| Segv on unknown address in mrb_bint_cmp in mruby | N/A unrated | 26ce85bd5de515906e01fdeeac774316628ad599 | 27 Jul 2022 |
| Segv on unknown address in mrb_bint_cmp in mruby | N/A unrated | 26ce85bd5de515906e01fdeeac774316628ad599 | 26 Jul 2022 |
| Segv on unknown address in mpz_add in mruby | N/A unrated | 26ce85bd5de515906e01fdeeac774316628ad599 | 26 Jul 2022 |
| Segv on unknown address in urshift in mruby | N/A unrated | 25a32ed681cd3fc48eabd6b8efa5683b1d32ffd0 | 25 Jul 2022 |
| Segv on unknown address in mpz_add in mruby | N/A unrated | 26ce85bd5de515906e01fdeeac774316628ad599 | 25 Jul 2022 |
| Heap-buffer-overflow in mrb_funcall_with_block in mruby | N/A high | 7010ed0f0a414b1367e4620a504f106759341cc2 | 15 Oct 2021 |
| Heap-buffer-overflow in mrb_funcall_with_block in mruby | N/A high | 7010ed0f0a414b1367e4620a504f106759341cc2 | 15 Oct 2021 |
| Heap-buffer-overflow in mrb_funcall_with_block in mruby | N/A high | 7010ed0f0a414b1367e4620a504f106759341cc2 | 15 Oct 2021 |
| Heap-buffer-overflow in mrb_vm_exec | N/A high | 36efd018e2d297636a3aa2799d214a8675a14e0c | 15 Oct 2021 |
| Heap-buffer-overflow in mrb_vm_exec in mruby | N/A unrated | 0455313a9bdbe93556a8fd31b7c011dd004a6f2b | 21 Sep 2021 |
| Heap-buffer-overflow in heredoc_remove_indent in mruby | N/A medium | 94fb86f89b131814201596d301f584dfe4547526 | 14 Feb 2021 |
| UNKNOWN READ vulnerability in mruby | N/A medium | 45aa5081e418423b47a32a06e0515406f63b64d2 | 01 Jul 2020 |
| UNKNOWN READ vulnerability in mruby | N/A medium | 264239f78fb9ec8047cf04b82f547fc41d65ab28 | 01 Jul 2020 |
Looking for another version, or everything Vulert holds for mruby?
Questions
About mruby 4.0.0-rc4
Is mruby 4.0.0-rc4 vulnerable?
Yes. 28 vulnerabilities in the Vulert database cover mruby 4.0.0-rc4: 0 critical, 9 high, 11 medium and 0 low, plus 8 not yet rated. Each entry above names the fixed version to move to.
How do I monitor mruby for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the mruby version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.