CVE-2026-53510
1 advisory.
RubyGems/savon CVE-2026-53510: high 8.1, EPSS 0.69%
Savon::Model evaluates WSDL operation names as Ruby source
Action: Upgrade savon to 2.17.2 or later.
bundle update savonAffected
| introduced | fixed | last affected |
|---|---|---|
| 0.9.8 | 2.17.2 | - |
Fixed versions
| 2.17.2 |
Sources
- osv: GHSA-mx5j-mp4f-g8jg
- https://github.com/savonrb/savon/security/advisories/GHSA-mx5j-mp4f-g8jg
- https://github.com/savonrb/savon/commit/8f22eb543e7436f6247172c9be47e22792d375e9
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/savon/CVE-2026-53510.yml
- https://github.com/savonrb/savon
- https://github.com/savonrb/savon/releases/tag/v2.17.2
- https://www.cve.org/CVERecord/SearchResults?query=CVE-2026-53510
CVE-2026-53510 · published · modified · JSON