# Ruby 3.3.12 Released

DevFeed: [Ruby 3.3.12 Released](<https://devfeed.tech/articles/ruby-3-3-12-released-19156.md>)

Original publisher: [Read original article](<https://www.ruby-lang.org/en/news/2026/07/16/ruby-3-3-12-released/>)

Published: 2026-07-16T05:08:11Z

Content type: release

Language: en

Sources: [Ruby-lang](<https://devfeed.tech/sources/ruby-lang.md>)

Topics: [Ruby](<https://devfeed.tech/topics/ruby.md>), [releases](<https://devfeed.tech/topics/releases.md>), [Release notes](<https://devfeed.tech/topics/release-notes.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [cve](<https://devfeed.tech/tags/cve.md>), [download](<https://devfeed.tech/tags/download.md>), [release](<https://devfeed.tech/tags/release.md>), [release-notes](<https://devfeed.tech/tags/release-notes.md>), [releases](<https://devfeed.tech/tags/releases.md>), [ruby](<https://devfeed.tech/tags/ruby.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

Ruby 3.3.12 has been released with security fixes. The update includes erb 4.0.3.1 and net-imap 0.4.25, which fixes multiple listed CVEs, including CVE-2026-42245, CVE-2026-42246, CVE-2026-42256, CVE-2026-42257, CVE-2026-42258, CVE-2026-47240, CVE-2026-47241, and CVE-2026-47242.

## Source excerpt

Ruby 3.3.12 has been released. This release includes security fixes. Please check the topics below for details. CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class This release updates the default gem erb to 4.0.3.1 and the bundled gem net-imap to 0.4.25. The net-imap update fixes CVE-2026-42245, CVE-2026-42246, CVE-2026-42256, CVE-2026-42257, CVE-2026-42258, CVE-2026-47240, CVE-2026-47241 and CVE-2026-47242. Please see the release notes of net-imap v0.4.24 and net-imap v0.4.25 for the details of these fixes. Please see the GitHub releases for further details. Download https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.12.tar.gz SIZE: 21489887 SHA1: 1ecad817a7d3727db65cf898a51d9956888cee5b SHA256: b06d63beae271933033e27f0a389bc582a009e7845357d44365c39de525a051b SHA512: 7c620438e85beb6744acc7d1e917af554238739883d592aa9839fca78514c11e91dfd8c4b5ce611d1ea507a4412ed81f3a8b5fc6eb07ba3e392a77b518de6829 https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.12.tar.xz SIZE: 15891224 SHA1: 7df70ae8a9feb880e2ad5054dfebd712ba03d0eb SHA256: 873e3297990b8cff7a5436f6e510a3a7a18c74e5f2c794e4162e605fe0a743b3 SHA512: 1755901f5d1e66250e4f9f4e3a0bf31ec25055f1cb86fafc68281f6d108e9cf5329a6c74c221b1a31aa7de78e9c2d8aa7b76faf39acfce44c5ed94cf7e766f3f https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.12.zip SIZE: 26954647 SHA1: 8be5a3c6f4a8821ce5326a9e09d4230c9fa06faa SHA256: fc1aecfb45adeb7bebbf9549d45ce6e57f0c9dac8b83cdeb80680de02a83ce41 SHA512: ff5a0339310c464b88a444871f901f41fc735f77668b29dfc70389aae5d44fd90b55cff6c02d47a23596663525b526a86f9906c08c371d37e3fb105ea9c6b1a9 Release Comment Many committers, developers, and users who provided bug reports helped us make this release. Thanks for their contributions. Posted by hsbt on 16 Jul 2026