Behind the GitLab RCE: A depthfirst Journey into the Ruby Ecosystem

Through the Open Defense Initiative, depthfirst analyzed roughly 40 Ruby gems and validated 105 vulnerabilities across 34 projects with more than 8.6 billion combined downloads, including flaws that led to remote code execution in GitLab.

The investigation shows how memory-safety flaws in native Ruby gems can become remotely reachable through widely deployed applications such as GitLab. Teams should inventory native-extension dependencies and move self-managed GitLab and Oj installations to fixed releases.