> Marshal madness: A brief history of Ruby deserialization exploits
[DATE: 19/08/2025 11:00]
[LANGUAGE: EN]
This post traces the decade-long evolution of Ruby Marshal deserialization exploits, demonstrating how security researchers have repeatedly bypassed patches and why fundamental changes to the Ruby ecosystem are needed rather than continued patch-and-hope approaches.