# Notice regarding recently-reported Ruby regular expression vulnerabilities (CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, CVE-2026-110264)

- Provider: [Cloudinary](https://down.guide/providers/cloudinary)
- Confidence: Confirmed
- Impact: Operational
- lasted 0m
- started 2026-10-24 07:03 UTC
- id: DWN-98a975a566
- Official page: https://stspg.io/95t4cpcqmr29

## Updates from Cloudinary
### 2026-10-24 07:03 UTC: resolved
On October 23, 2026, the Ruby project released security fixes for vulnerabilities in its regular expression engine (CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, CVE-2026-110264).
Cloudinary upgraded its core platform, including its upload, transformation, and delivery APIs and Console, to the patched Ruby version on the same day. Our review found no evidence of exploitation and no impact on customers or customer data. No action is required on your part for the Cloudinary platform.
Customers who use Ruby in their own applications, including with the Cloudinary Ruby SDK, should update Ruby in their environments to a patched release (3.3.13, 3.4.12, 4.0.9 or later).

From the builder: does your app depend on Cloudinary? [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=cloudinary) detects problems in your own logs without hand-written monitors, and you can ask it in plain language which errors mention Cloudinary.

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=DWN-98a975a566), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.