CVE-2026-118389 | RubyGems up to 28.2.x Metadata Validation prototype pollution

A vulnerability, which was classified as problematic, has been found in RubyGems up to 28.2.x. The impacted element is an unknown function of the component Metadata Validation. The manipulation leads to improperly controlled modification of object prototype attributes.

This vulnerability is listed as CVE-2026-118389. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More