{"id":"CVE-2026-38976","details":"mrubyc through 3.4.1 was found to contain a NULL pointer dereference in src/vm.c in op_super() / OP_SUPER due to a missing runtime guard for top-level super.","modified":"2026-08-12T16:23:56.255461Z","published":"2026-07-06T00:00:00Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/38xxx/CVE-2026-38976.json","cna_assigner":"mitre"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/38xxx/CVE-2026-38976.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-38976"},{"type":"REPORT","url":"https://github.com/mrubyc/mrubyc/issues/276"},{"type":"FIX","url":"https://github.com/hayat01sh1da/mrubyc/commit/c4aa2a06bfdd13a0f1ae5165c5760a2530314a42"},{"type":"PACKAGE","url":"https://github.com/mrubyc/mrubyc"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/hayat01sh1da/mrubyc","events":[{"introduced":"0"},{"fixed":"c4aa2a06bfdd13a0f1ae5165c5760a2530314a42"}],"database_specific":{"source":"REFERENCES"}},{"type":"GIT","repo":"https://github.com/mrubyc/mrubyc","events":[{"introduced":"0"},{"fixed":"6782f50de4b7bf60ca3756ffd4287f8258b03fa0"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"3.4.1"}],"source":"DESCRIPTION"}}],"versions":["release3.4","release3.3.1","release3.3","release3.2","release3.2-rc1","release3.2-beta1","release3.1","release2.1","release2.0","release1.2","release1.1","release1.1RC2","release1.0","beta4","beta3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-38976.json","vanir_signatures_modified":"2026-08-12T16:23:56Z","vanir_signatures":[{"source":"https://github.com/hayat01sh1da/mrubyc/commit/c4aa2a06bfdd13a0f1ae5165c5760a2530314a42","target":{"file":"src/vm.c"},"deprecated":false,"digest":{"line_hashes":["300393377631693970406548525635047979871","266833567745543915087981810537007569053","280835670526691372506485693391848490313","327787395166955751882804344819657239464"],"threshold":0.9},"id":"CVE-2026-38976-55d0349f","signature_type":"Line","signature_version":"v1"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}