# Ruby changelog > A dynamic, open-source language focused on simplicity and productivity. - Vendor: Ruby - Category: Languages & Runtimes - Official site: https://www.ruby-lang.org - Tracked by: What's New (https://whatsnew.fyi/product/ruby) - Harvested from: Blog (https://www.ruby-lang.org/en/feeds/news.rss) - Entries below: 10 (newest first) What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. ## Releases ### Ruby 3.3.12 Released - Date: 2026-07-16 - Original notes: https://www.ruby-lang.org/en/news/2026/07/16/ruby-3-3-12-released/ - Permalink: https://whatsnew.fyi/product/ruby/releases/feed-https-www.ruby-lang.org-en-news-2026-07-16-ruby-3-3-12 Ruby 3.3.12 has been released. This release includes security fixes. Please check the topics below for details. CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / de… - **security** — Fix ERB deserialization guard bypass vulnerability via def_module and def_method ### Ruby 4.0.6 Released - Date: 2026-07-14 - Original notes: https://www.ruby-lang.org/en/news/2026/07/14/ruby-4-0-6-released/ - Permalink: https://whatsnew.fyi/product/ruby/releases/feed-https-www.ruby-lang.org-en-news-2026-07-14-ruby-4-0-6-r Ruby 4.0.6 has been released. This is a routine update that includes bugfixes. Please see the GitHub releases for further details. Release Schedule We intend to release the latest stable Ruby version… ### Ruby 3.4.10 Released - Date: 2026-06-30 - Original notes: https://www.ruby-lang.org/en/news/2026/06/30/ruby-3-4-10-released/ - Permalink: https://whatsnew.fyi/product/ruby/releases/feed-https-www.ruby-lang.org-en-news-2026-06-30-ruby-3-4-10 Ruby 3.4.10 has been released. This release is a regular stable package release contains the version update of bundled gem net-imap. The net-imap.gem update contains some security fixes. Please see th… - **security** — bundled gem net-imap contains security fixes ### Ruby 4.0.5 Released - Date: 2026-05-20 - Original notes: https://www.ruby-lang.org/en/news/2026/05/20/ruby-4-0-5-released/ - Permalink: https://whatsnew.fyi/product/ruby/releases/feed-https-www.ruby-lang.org-en-news-2026-05-20-ruby-4-0-5-r Ruby 4.0.5 has been released. This release only contains a security fix for CVE-2026-46727: Use-after-free in pthread-based getaddrinfo timeout handler and a build system regression in Ruby 4.0.4 unde… - **security** — Fix use-after-free in pthread-based getaddrinfo timeout handler (CVE-2026-46727) - **fixed** — Fix build system regression in Ruby 4.0.4 ### CVE-2026-46727: Use-after-free in pthread-based getaddrinfo timeout handler - Date: 2026-05-20 - Original notes: https://www.ruby-lang.org/en/news/2026/05/20/getaddrinfo-cve-2026-46727/ - Permalink: https://whatsnew.fyi/product/ruby/releases/feed-https-www.ruby-lang.org-en-news-2026-05-20-getaddrinfo A use-after-free vulnerability has been discovered in the pthread-based getaddrinfo timeout handler of Ruby. This vulnerability has been assigned the CVE identifier CVE-2026-46727 . This issue has bee… - **security** — Fix use-after-free vulnerability in pthread-based getaddrinfo timeout handler (CVE-2026-46727) ### Ruby 4.0.4 Released - Date: 2026-05-11 - Original notes: https://www.ruby-lang.org/en/news/2026/05/11/ruby-4-0-4-released/ - Permalink: https://whatsnew.fyi/product/ruby/releases/feed-https-www.ruby-lang.org-en-news-2026-05-11-ruby-4-0-4-r Ruby 4.0.4 has been released. This is a routine update that includes bugfixes. Please see the GitHub Releases for further details. Release Schedule We intend to release the latest stable Ruby version… ### Ruby 4.0.3 Released - Date: 2026-04-21 - Original notes: https://www.ruby-lang.org/en/news/2026/04/21/ruby-4-0-3-released/ - Permalink: https://whatsnew.fyi/product/ruby/releases/feed-https-www.ruby-lang.org-en-news-2026-04-21-ruby-4-0-3-r Ruby 4.0.3 has been released. This release only contains ERB 6.0.1.1, which fixes CVE-2026-41316 . If your application calls Marshal.load on untrusted data AND has both erb and activesupport loaded, p… - **security** — Fix CVE-2026-41316 in ERB 6.0.1.1 ### CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class - Date: 2026-04-21 - Original notes: https://www.ruby-lang.org/en/news/2026/04/21/erb-cve-2026-41316/ - Permalink: https://whatsnew.fyi/product/ruby/releases/feed-https-www.ruby-lang.org-en-news-2026-04-21-erb-cve-2026 We published security advisory for CVE-2026-41316. CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class A deserialization vulnerability exists in ERB. This v… - **security** — Fix deserialization vulnerability in ERB @_init guard bypass via def_module, def_method, and def_class ### Ruby 3.2.11 Released - Date: 2026-03-27 - Original notes: https://www.ruby-lang.org/en/news/2026/03/27/ruby-3-2-11-released/ - Permalink: https://whatsnew.fyi/product/ruby/releases/feed-https-www.ruby-lang.org-en-news-2026-03-27-ruby-3-2-11 Ruby 3.2.11 has been released. This release includes an update to the zlib gem addressing CVE-2026-27820 . Please see the GitHub releases for further details. This is the final release of the Ruby 3.2… - **security** — Update zlib gem to address CVE-2026-27820 ### Ruby 3.3.11 Released - Date: 2026-03-26 - Original notes: https://www.ruby-lang.org/en/news/2026/03/26/ruby-3-3-11-released/ - Permalink: https://whatsnew.fyi/product/ruby/releases/feed-https-www.ruby-lang.org-en-news-2026-03-26-ruby-3-3-11 Ruby 3.3.11 has been released. This release includes an update to the zlib gem addressing CVE-2026-27820 , along with some bug fixes. Please see the GitHub releases for further details. This is the la… - **security** — Updated zlib gem to address CVE-2026-27820 - **fixed** — Fixed various bugs