# Ruby CVE-2026-46727: Use-after-free in pthread-based getaddrinfo timeout handler

- Product: Ruby (https://whatsnew.fyi/product/ruby)
- Vendor: Ruby
- Date: 2026-05-20
- Original notes: https://www.ruby-lang.org/en/news/2026/05/20/getaddrinfo-cve-2026-46727/
- Permalink: https://whatsnew.fyi/product/ruby/releases/2026-05-20-cve-2026-46727-use-after-free-in-pthread-based-ge

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

A use-after-free vulnerability has been discovered in the pthread-based getaddrinfo timeout handler of Ruby. This vulnerability has been assigned the CVE identifier CVE-2026-46727 . This issue has bee…

- **security** — Fix use-after-free vulnerability in pthread-based getaddrinfo timeout handler (CVE-2026-46727)