CVE-2026-34827: Ruby Unescaped Regex Interpolation

Unescaped interpolation in a regular expression was detected. When interpolating user-controlled data or configurations into a regular expression for a strip-prefix or match operation, it must be escaped to prevent logic bypass, information disclosure, or Denial of Service (ReDoS). If the interpolation contains regex metacharacters, the substitution may sile

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Ruby
greprules fetch cve-2026-34827-ruby-unescaped-regex-interpolation --engine opengrep

Description

Unescaped interpolation in a regular expression was detected. When interpolating user-controlled data or configurations into a regular expression for a strip-prefix or match operation, it must be escaped to prevent logic bypass, information disclosure, or Denial of Service (ReDoS). If the interpolation contains regex metacharacters, the substitution may sile