Depthfirst reports 105 flaws across Ruby projects with 8.6 billion downloads
The AI security startup says 62 findings are acknowledged by maintainers, after related flaws enabled code execution in self-managed GitLab.
By Ryan Merket · Published
Primary source: X
Why it matters
Depthfirst's findings show how native code can undermine a memory-safe language, while the GitLab exploit tests whether AI security agents can connect buried bugs to reachable product risk.
Qasim Mithani, Andrea Michi (@andreamichi), and Daniele Perito's Depthfirst said on July 27th that its AI security platform found and validated 105 vulnerabilities across 34 Ruby projects whose packages have recorded more than 8.6 billion combined downloads.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.