The go-to resource for upgrading Ruby, Rails, and your dependencies.
An in-depth look at CVE-2007-5162, a vulnerability in Ruby's Net::HTTPS library that failed to validate server certificate Common Names, enabling man-in-the-middle attacks.
Mar 15, 2026