ruby • 2026-04-21CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class