Skip to content
OpenAdvisories

Product · Shopify

ruby-lsp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-34060

    Ruby LSP has arbitrary code execution through branch setting

    Ruby LSP is an implementation of the language server protocol for Ruby. Prior to Shopify.ruby-lsp version 0.10.2 and ruby-lsp version 0.26.9, the rubyLsp.branch VS Code workspace setting was interpolated without sanitization into a generated Gemfile, allowing…

    Shopify ruby-lsp Shopify.ruby-lsp ruby-lsp Debian RubyGems