---
id: 1353
title: "Marshal madness: A brief history of Ruby deserialization exploits"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2025/08/20/marshal-madness-a-brief-history-of-ruby-deserialization-exploits/"
published_at: "2025-08-19 11:00"
tags: ["ruby", "deserialization", "vulnerabilities", "trail-of-bits", "marshal", "exploits", "gadget-chain", "vulnerability-history", "gadget-chains", "security-history"]
phying_url: "https://phying.com/item/1353"
lang: en
---

# Marshal madness: A brief history of Ruby deserialization exploits

## Summary

A decade-long history of Ruby Marshal deserialization exploits shows researchers repeatedly bypassing patches, arguing for fundamental ecosystem changes rather than a patch-and-hope approach.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2025-08-19 11:00
- **Original:** https://blog.trailofbits.com/2025/08/20/marshal-madness-a-brief-history-of-ruby-deserialization-exploits/
- **Phying News:** https://phying.com/item/1353