Summary
DNS timing race can trigger a use-after-free. This high-severity finding affects Ruby.
Disclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified
Vulnerability disclosure
DNS timing race can trigger a use-after-free
CVE-2026-46727
- Affected product
- Ruby
- Severity
- High · CVSS 8.1
- Weakness
- CWE-362
- Disclosed