CVE-2026-34830: Ruby Unescaped Regex Interpolation Path Sub

Unescaped variables interpolated into regular expressions can alter match logic if they contain regex metacharacters. In path stripping contexts, this can fail to remove intended root prefixes, leading to absolute path disclosure. Always secure dynamic values using `Regexp.escape(...)` before interpolation.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Ruby^β