A forlorn businessman resting his head against a wall beside a window. Photo by Andrea Piacquadio, via Pexels. In the hours following the release of CVE-2026-89078 for the project Ruby, site reliability workers and systems administrators scrambled to desperately rebuild and patch all their systems to fix a double free in Ruby's Onigmo regular expression parser when parsing fails after an alternation, allowing memory corruption and potential remote code execution in applications that compile attacker-controlled patterns. This is due to the affected components being written in C, the only programming language where these vulnerabilities regularly happen. "This was a terrible...