Description
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
Remediation
References
Related Vulnerabilities
WordPress Plugin Wordspew 'id' Parameter SQL Injection (1.16)
WordPress Plugin ReFlex Gallery Arbitrary File Upload (3.1.3)
WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.9.8)
WordPress Plugin kk Star Ratings Security Bypass (2.3.1)
WordPress Plugin qTranslate X Multiple Cross-Site Scripting Vulnerabilities (3.4.6.8)