# Ruby 4.0.3 — Ruby 4.0.3 Released - Product: Ruby (https://whatsnew.fyi/product/ruby) - Vendor: Ruby - Date: 2026-04-21 - Version: 4.0.3 - Original notes: https://www.ruby-lang.org/en/news/2026/04/21/ruby-4-0-3-released/ - Permalink: https://whatsnew.fyi/product/ruby/releases/4.0.3 What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- Ruby 4.0.3 has been released. This release only contains ERB 6.0.1.1, which fixes CVE-2026-41316 . If your application calls Marshal.load on untrusted data AND has both erb and activesupport loaded, p… - **security** — Fix CVE-2026-41316 in ERB 6.0.1.1