What is GHSA-ff2c-rpvx-jp6m?

GHSA-ff2c-rpvx-jp6m is a security advisory published by GitHub Security Advisories with unknown severity. mrubyc through 3.4.1 was found to contain a NULL pointer dereference in src/vm.c in op_super() /...

Which CVE IDs does GHSA-ff2c-rpvx-jp6m cover?

GHSA-ff2c-rpvx-jp6m covers the following CVE IDs: CVE-2026-38976. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-ff2c-rpvx-jp6munknown

mrubyc through 3.4.1 was found to contain a NULL pointer dereference in src/vm.c in op_super() /...

Vendor

GitHub Security Advisories

Published

July 7, 2026

Last Modified

July 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-38976 →

📋 Description

mrubyc through 3.4.1 was found to contain a NULL pointer dereference in src/vm.c in op_super() / OP_SUPER due to a missing runtime guard for top-level super.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-38976
https://github.com/mrubyc/mrubyc/issues/276
https://github.com/hayat01sh1da/mrubyc/commit/c4aa2a06bfdd13a0f1ae5165c5760a2530314a42
https://github.com/mrubyc/mrubyc
https://github.com/advisories/GHSA-ff2c-rpvx-jp6m