RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-32731Highio.grpc:grpc-protobuf: Connection confusion in gRPCCVE-2023-36617Mediumuri: URI gem has ReDoS vulnerabilityCVE-2023-28362Mediumactionpack: Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_toCVE-2023-3445Lowspina: Spina Cross-site Scripting vulnerabilityCVE-2023-34246Mediumdoorkeeper: Doorkeeper Improper Authentication vulnerabilityCVE-2023-23913Mediumactionview: rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML ElementsCVE-2023-27531Mediumkredis: Kredis JSON Possible Deserialization of Untrusted Data VulnerabilityCVE-2023-31606HighRedCloth: RedCloth Regular Expression Denial of Service issueCVE-2023-34102Highavo: avo possible unsafe reflection / partial DoS vulnerabilityCVE-2023-34103Highavo: avo vulnerable to Stored XSS (Cross Site Scripting) in html content based fieldsCVE-2015-20108Criticalruby-saml: ruby-saml vulnerable to XPath injectionCVE-2023-30145Criticalcamaleon_cms: Server-Side Template Injection in Camaleon CMSCVE-2023-25309Mediumrollout-ui: Cross Site Scripting (XSS) Vulnerability in Fetlife rollout-ui gemCVE-2024-22047Lowaudited: Race Condition leading to logging errorsCVE-2022-37454Criticalpysha3: Buffer overflow in sponge queue functionsCVE-2023-30618Lowkitchen-terraform: Sensitive Terraform Output Values Printed At Info Logging Level In Kitchen-TerraformCVE-2023-1892Highsidekiq: sidekiq vulnerable to cross-site scripting CVE-2023-30614Highpay: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in PayGHSA-48WP-P9QV-4J64Mediumcommonmarker: Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of serviceGHSA-PXVG-2QJ5-37JQMediumnokogiri: Nokogiri updates packaged libxml2 to v2.10.4 to resolve multiple CVEsCVE-2024-22048Lowgovuk_tech_docs: govuk_tech_docs vulnerable to unescaped HTML on search results pageCVE-2020-21514Highfluentd-ui: Fluent Fluentd and Fluent-ui use default passwordCVE-2023-28756Hightime: Ruby Time component ReDoS issueCVE-2023-28755Highuri: Ruby URI component ReDoS issueCVE-2023-28846Mediumunpoly-rails: unpoly-rails Denial of Service vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo