Approved changes feed: RSS · Atom

cpe:2.3:a:mruby:mruby:2.1.2:rc:*:*:*:*:*:*

part: a version: 2.1.2 update: rc

VendorMruby (9cbf21a3-c0af-5fbb-8b39-9d374f90b914)
ProductMruby (b620d953-6199-51f2-9d31-59ebbe2a5cce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mruby purl2cpe 2026-06-01 10:18:11.078167
pkg:deb/ubuntu/mruby purl2cpe 2026-06-01 10:18:11.078169
pkg:github/mruby/mruby purl2cpe 2026-06-01 10:18:11.078170
pkg:rpm/opensuse/mruby purl2cpe 2026-06-01 10:18:11.078172

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-15866 vulnerable 2026-06-08 05:19:27.070003 Details available
mruby through 2.1.2-rc has a heap-based buffer overflow in the mrb_yield_with_class function in vm.c because of incorrect VM stack handling. It can be triggered via the stack_copy function.
Published: 2020-07-21T14:54:09.000Z
Updated: 2024-08-04T13:30:22.739Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.