RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2024-47529Mediumopenc3: OpenC3 stores passwords in clear text (`GHSL-2024-129`)CVE-2024-46977Highopenc3: OpenC3 Path Traversal via screen controller (`GHSL-2024-127`)CVE-2024-43795Mediumopenc3: OpenC3 Cross-site Scripting in Login functionality (`GHSL-2024-128`)CVE-2024-41673Highdecidim: Decidim has a cross-site scripting vulnerability in the version control pageGHSA-75J2-9GMC-M855Mediumcamaleon_cms: Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)CVE-2024-46488Highsqlite-vec: Heap-based Buffer Overflow in sqlite-vecGHSA-8FX8-3RG2-79XWMediumcamaleon_cms: Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)CVE-2024-47220Highwebrick: HTTP Request Smuggling in ruby webrickCVE-2024-45614Mediumpuma: Puma's header normalization allows for client to clobber proxy set headersCVE-2024-7254Highcom.google.protobuf:protobuf-java: protobuf-java has potential Denial of Service issueGHSA-7X4W-CJ9R-H4V9Highcamaleon_cms: Camaleon CMS vulnerable to remote code execution through code injection (GHSL-2024-185)GHSA-R9CR-QMFW-PMRCMediumcamaleon_cms: Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)CVE-2024-46987Highcamaleon_cms: Camaleon CMS vulnerable to arbitrary path traversal (GHSL-2024-183)CVE-2024-46986Highcamaleon_cms: Camaleon CMS affected by arbitrary file write to RCE (GHSL-2024-182)CVE-2024-8796Mediumdevise-two-factor: Devise-Two-Factor Authentication Uses Insufficient Default OTP Shared Secret LengthCVE-2024-39910Mediumdecidim: Decidim::Admin vulnerable to cross-site scripting (XSS) in the admin panel with QuillJS WYSWYG editorCVE-2024-32034Mediumdecidim-admin: Decidim::Admin vulnerable to cross-site scripting (XSS) in the admin activity logGHSA-CVP8-5R8G-FHVQCriticalomniauth-saml: omniauth-saml vulnerable to Improper Verification of Cryptographic SignatureCVE-2024-45409Criticalruby-saml: SAML authentication bypass via Incorrect XPath selectorCVE-2024-43791Mediumrequest_store: request_store has Incorrect Default PermissionsCVE-2024-43398Highrexml: REXML denial of service vulnerabilityCVE-2024-43380Mediumfugit: fugit parse and parse_nat stall on lengthy inputCVE-2024-42360Criticalsequenceserver: Command Injection in sequenceserverCVE-2024-41946Mediumrexml: REXML DoS vulnerabilityCVE-2024-41123Mediumrexml: REXML DoS vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo