---
title: "Ruby 4.0.3 Released"
url: https://daily.dev/posts/ruby-4-0-3-released-ufla2rxas
source_url: https://www.ruby-lang.org/en/news/2026/04/21/ruby-4-0-3-released/
type: article
source: "Ruby"
published: 2026-04-21T09:15:13.164Z
updated: 2026-04-22T08:25:52.244Z
tags: ["security", "ruby"]
reading_time: 2
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Ruby 4.0.3 Released

**[Ruby](https://daily.dev/sources/ruby)** · 2 min read · 0 upvotes · 0 comments

## Summary

Ruby 4.0.3 has been released as a security patch containing ERB 6.0.1.1, which fixes CVE-2026-41316. Applications that call Marshal.load on untrusted data while having both erb and activesupport loaded are affected and should update. The release schedule for upcoming Ruby 4.0 patch versions is also outlined, with 4.0.4 planned for May.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.ruby-lang.org/en/news/2026/04/21/ruby-4-0-3-released/>

## Similar posts on daily.dev

- [Ruby 4.0.5 Released](https://daily.dev/posts/ruby-4-0-5-released-twcsdi9wj) · Ruby · 1 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#ruby](https://daily.dev/tags/ruby)

[View this post on daily.dev](https://daily.dev/posts/ruby-4-0-3-released-ufla2rxas)