Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Looks like the rubygems api was leaking users api keys due to some cache vulnerability.

They did a write up alongside the org that found it:

https://blog.rubygems.org/2026/07/22/security-advisory-legac... https://trufflesecurity.com/blog/rubygems-cache-vulnerabilit...



Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: