CVE-2026-54497

RubyGems/view_component CVE-2026-54497: medium 6.8, EPSS 0.33%

ViewComponent: Reused Component Instances Retain Stale Render Context

Action: Upgrade view_component to 4.12.0 or later.

bundle update view_component

Affected

Fixed versions

Sources

• osv: GHSA-9h85-g7w3-rh49
• https://github.com/ViewComponent/view_component/security/advisories/GHSA-9h85-g7w3-rh49
• https://github.com/ViewComponent/view_component/commit/7b05073be28037f7d5ff141e9dd42f3cf47956a4
• https://github.com/ViewComponent/view_component
• https://github.com/ViewComponent/view_component/releases/tag/v4.12.0
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/view_component/CVE-2026-54497.yml
• https://www.cve.org/CVERecord/SearchResults?query=CVE-2026-54497

CVE-2026-54497 · published 2026-07-15T22:51:33Z · modified 2026-07-15T23:11:42.851858Z · JSON