CVE-2022-0080

mruby is vulnerable to Heap-based Buffer Overflow

• CWE-122
• CWE-122

• https://github.com/mruby/mruby/commit/28ccc664e5dcd3f9d55173e9afde77c4705a9ab6Patch, Third Party Advisory
• https://huntr.dev/bounties/59a70392-4864-4ce3-8e35-6ac2111d1e2eExploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/mruby/mruby/commit/28ccc664e5dcd3f9d55173e9afde77c4705a9ab6Patch, Third Party Advisory
• https://huntr.dev/bounties/59a70392-4864-4ce3-8e35-6ac2111d1e2eExploit, Issue Tracking, Patch, Third Party Advisory

Published

Jan 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0070Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch …8.8
• CVE-2022-0071Incomplete fix for CVE-2021-3101. Hotdog, prior to v1.0.2, d…8.8
• CVE-2022-0072Directory Traversal vulnerability in LiteSpeed Technologies …5.8
• CVE-2022-0073Improper Input Validation vulnerability in LiteSpeed Technol…8.8
• CVE-2022-0074Untrusted Search Path vulnerability in LiteSpeed Technologie…8.8
• CVE-2022-0079showdoc is vulnerable to Generation of Error Message Contain…5.3
• CVE-2022-0083livehelperchat is vulnerable to Generation of Error Message …5.3
• CVE-2022-0084A flaw was found in XNIO, specifically in the notifyReadClos…7.5
• CVE-2022-0085Server-Side Request Forgery (SSRF) in GitHub repository domp…5.3
• CVE-2022-0086uppy is vulnerable to Server-Side Request Forgery (SSRF)9.8
• CVE-2022-0087keystone is vulnerable to Improper Neutralization of Input D…6.1
• CVE-2022-0088Cross-Site Request Forgery (CSRF) in GitHub repository yourl…7.4