Skip to content
Hawk Host Knowledge Base

Ruby Security Release: October 2026

On October 23, 2026, Ruby released several bugs to Ruby’s regular expression engine that could lead to remote code execution. The bugs had the following CVE identifiers:

  • CVE-2026-89078 - Double Free issue in Regular Expression Parser
  • CVE-2026-93577 - Integer Overflow issue in Regular Expression Compiler
  • CVE-2026-97229 - Integer Overflow issue in CI/CD Regular Expression Compiler
  • CVE-2026-110264 - Integer Overflow issue in Regular Expression Compiler

Web Hosting Plans

Section titled “Web Hosting Plans”

Hawk Host uses CloudLinux to provide Ruby hosting. CloudLinux is providing updates not only for supported Ruby versions but also for end-of-life versions.

Current Status

Section titled “Current Status”

The following versions have been updated:

  • Ruby 2.6
  • Ruby 2.7
  • Ruby 3.0
  • Ruby 3.1
  • Ruby 3.2
  • Ruby 3.3
  • Ruby 3.4
  • Ruby 3.5
  • Ruby 4.0

Virtual Private Servers

Section titled “Virtual Private Servers”

For Virtual Private Servers, you should upgrade to a supported version as soon as possible. You will need to refer to your specific deployment stack on how you can update.