CVE Tools
Track your stack

Mruby

25 CVEs tracked since 2018. Since Jun 2018, none of them reached CISA KEV.

Mruby CVEs per month

Jun 2018 to Apr 2022. Point at a month, or focus the strip and use the arrow keys.
Mruby CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2018-0640
2018-07null or fewer
2018-08null or fewer
2018-09null or fewer
2018-10null or fewer
2018-11null or fewer
2018-12null or fewer
2019-01null or fewer
2019-02null or fewer
2019-03null or fewer
2019-04null or fewer
2019-05null or fewer
2019-06null or fewer
2019-07null or fewer
2019-08null or fewer
2019-09null or fewer
2019-10null or fewer
2019-11null or fewer
2019-12null or fewer
2020-0130
2020-02null or fewer
2020-03null or fewer
2020-04null or fewer
2020-05null or fewer
2020-06null or fewer
2020-07null or fewer
2020-08null or fewer
2020-09null or fewer
2020-10null or fewer
2020-11null or fewer
2020-12null or fewer
2021-01null or fewer
2021-02null or fewer
2021-03null or fewer
2021-04null or fewer
2021-05null or fewer
2021-06null or fewer
2021-07null or fewer
2021-08null or fewer
2021-09null or fewer
2021-10null or fewer
2021-11null or fewer
2021-12null or fewer
2022-0140
2022-0290
2022-03null or fewer
2022-0450

Products

The products that kept showing up in Mruby's monthly top three, with their CVEs summed over those months.

  1. Mruby255 months
  2. Mruby/mruby173 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Mruby.

  1. CVE-2026-1979mruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free5.3
  2. CVE-2025-13120mruby array.c sort_cmp use after free5.3
  3. CVE-2025-12875mruby array.c ary_fill_exec out-of-bounds write5.3
  4. CVE-2025-7207mruby nregs codegen.c scope_new heap-based overflow3.3
  5. CVE-2021-46023An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and application crash.7.5
  6. CVE-2022-1934Use After Free in mruby/mruby7.8
  7. CVE-2022-1427Out-of-bounds Read in mrb_obj_is_kind_of in in mruby/mruby7.8
  8. CVE-2022-1286heap-buffer-overflow in mrb_vm_exec in mruby/mruby in mruby/mruby9.8
  9. CVE-2022-1276Out-of-bounds Read in mrb_get_args in mruby/mruby9.8
  10. CVE-2022-1212Use-After-Free in str_escape in mruby/mruby in mruby/mruby9.8
  11. CVE-2022-1201NULL Pointer Dereference in mrb_vm_exec with super in mruby/mruby6.5
  12. CVE-2022-1106use after free in mrb_vm_exec in mruby/mruby9.1
  13. CVE-2022-1071User after free in mrb_vm_exec in mruby/mruby8.2
  14. CVE-2022-0890NULL Pointer Dereference in mruby/mruby5.5
  15. CVE-2022-0717Out-of-bounds Read in mruby/mruby9.1

The record

Peak rank
#67 in Feb 2022
Busiest month shown
Feb 2022, 9 CVEs
Months with a KEV entry
0 since Jun 2018
Monthly snapshots
5 since 2018
Mruby's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store