CVE-2011-5331: Distributed Ruby Project Distributed Ruby

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Distributed Ruby (aka DRuby) 1.8 mishandles instance_eval.

Affected products

• Distributed Ruby Project Distributed Ruby: version 1.8 only

Published 2019-11-18. Last modified 2026-06-16.