""Ruby has generally considered it unsafe to compile and use a regular expression created from untrusted input."" "We plan to discuss how to document this, and whether we treat this kind of issue as a vulnerability in Ruby, including whether to request CVE identifiers for these fixes."
