[rottenorange542]

Looks like the rubygems api was leaking users api keys due to some cache vulnerability.

They did a write up alongside the org that found it:

https://blog.rubygems.org/2026/07/22/security-advisory-legac... https://trufflesecurity.com/blog/rubygems-cache-vulnerabilit...