CVE-2020-6840: Mruby

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c.

Affected products

  • Mruby Mruby: version 2.1.0 only

Published 2020-01-11. Last modified 2026-06-17.