ruby

• CVE-2026-41010 - BOSH Director release job command injection 2026-06-06
• Ruby unsafe deserialization — `Marshal.load` / `YAML.load` 2026-04-26