{"id":"AZL-110513","summary":"CVE-2025-0306 affecting package ruby 3.3.5-10","details":"A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service.","modified":"2026-10-24T05:31:56Z","published":"2025-01-09T04:15:13Z","upstream":["CVE-2025-0306"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0306"}],"affected":[{"package":{"name":"ruby","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/ruby"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.3.5-10"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110513.json"}}],"schema_version":"1.9.0"}