We disclosed two CVEs for the default gems today.

* https://www.ruby-lang.org/en/news/2024/03/21/buffer-overread-cve-2024-27280/
* https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/

We recommend to upgrade them for keep your code as safety.