On October 23, 2026, The Hacker News reported Ruby, Onigmo, GitLab. The figures I am keeping are 4.0, 9, 3.4. The framing is mine. Their sentences stay on their page.
I am keeping this to the public citation. I am not adding detail past that.
If this sits on a shop, a clinic, or a desk I run, I read the vendor notice before I tell anyone to patch.
Source I used: The Hacker News. The link is under this column.