RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2015-20108Criticalruby-saml: ruby-saml vulnerable to XPath injection CVE-2023-30145Criticalcamaleon_cms: Server-Side Template Injection in Camaleon CMS CVE-2023-25309Mediumrollout-ui: Cross Site Scripting (XSS) Vulnerability in Fetlife rollout-ui gem CVE-2024-22047Lowaudited: Race Condition leading to logging errors CVE-2022-37454Criticalpysha3: Buffer overflow in sponge queue functions CVE-2023-30618Lowkitchen-terraform: Sensitive Terraform Output Values Printed At Info Logging Level In Kitchen-Terraform CVE-2023-1892Highsidekiq: sidekiq vulnerable to cross-site scripting CVE-2023-30614Highpay: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in Pay GHSA-48WP-P9QV-4J64Mediumcommonmarker: Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of service GHSA-PXVG-2QJ5-37JQMediumnokogiri: Nokogiri updates packaged libxml2 to v2.10.4 to resolve multiple CVEs CVE-2024-22048Lowgovuk_tech_docs: govuk_tech_docs vulnerable to unescaped HTML on search results page CVE-2020-21514Highfluentd-ui: Fluent Fluentd and Fluent-ui use default password CVE-2023-28756Hightime: Ruby Time component ReDoS issue CVE-2023-28755Highuri: Ruby URI component ReDoS issue CVE-2023-28846Mediumunpoly-rails: unpoly-rails Denial of Service vulnerability CVE-2014-4920Mediumtwitter-bootstrap-rails: Reflective Cross-site Scripting Vulnerability in twitter-bootstrap-rails CVE-2023-27539Lowrack: Possible Denial of Service Vulnerability in Rack's header parsing CVE-2023-28120Mediumactivesupport: Possible XSS Security Vulnerability in SafeBuffer#bytesplice CVE-2023-27530Highrack: Rack has possible DoS Vulnerability in Multipart MIME parsing CVE-2022-36231Criticalpdf_info: Code injection in pdf_info CVE-2023-25015Mediumclockwork_web: Clockwork Web contains a Cross-Site Request Forgery Vulnerability with Rails < 5.2 CVE-2023-0569Mediumpublify_core: Publify contains Weak Password Requirements CVE-2023-23627Mediumsanitize: Improper neutralization of `noscript` element content may allow XSS in Sanitize CVE-2013-2513Criticalflash_tool: flash_tool Gem for Ruby File Download Handling Arbitrary Command Execution CVE-2015-8314Highdevise: Devise Gem for Ruby Unauthorized Access Using "Remember Me" Cookie

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.