A new Ruby blog post/announcement has been posted!
Get the full details here: CVE-2025-61594: URI Credential Leakage Bypass previous fixes