Known CVE vulnerabilities and GitHub Security Advisories affecting the RubyGems package erb, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (1)
CVE-2026-41316 — CVSS 8.1 (high): ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) introduced an `@_init` instance variable…