RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2014-4920Mediumtwitter-bootstrap-rails: Reflective Cross-site Scripting Vulnerability in twitter-bootstrap-railsCVE-2023-27539Lowrack: Possible Denial of Service Vulnerability in Rack's header parsingCVE-2023-28120Mediumactivesupport: Possible XSS Security Vulnerability in SafeBuffer#bytespliceCVE-2023-27530Highrack: Rack has possible DoS Vulnerability in Multipart MIME parsingCVE-2022-36231Criticalpdf_info: Code injection in pdf_infoCVE-2023-25015Mediumclockwork_web: Clockwork Web contains a Cross-Site Request Forgery Vulnerability with Rails < 5.2CVE-2023-0569Mediumpublify_core: Publify contains Weak Password RequirementsCVE-2023-23627Mediumsanitize: Improper neutralization of `noscript` element content may allow XSS in SanitizeCVE-2013-2513Criticalflash_tool: flash_tool Gem for Ruby File Download Handling Arbitrary Command ExecutionCVE-2015-8314Highdevise: Devise Gem for Ruby Unauthorized Access Using "Remember Me" CookieCVE-2015-2179Mediumxaviershay-dm-rails: xaviershay-dm-rails Gem for Ruby exposes sensitive information via the process tableGHSA-636F-XM5J-PJ9MMediumcommonmarker: Several quadratic complexity bugs may lead to denial of service in CommonmarkerGHSA-Q95H-CQRV-8JV5Highexiftool_vendored: ExifTool vulnerable to arbitrary code executionCVE-2009-4123Highjruby-openssl: jruby-openssl gem for JRuby fails to do proper certificate validationCVE-2022-44571Lowrack: Denial of Service Vulnerability in Rack Content-Disposition parsingCVE-2023-22792Lowactionpack: ReDoS based DoS vulnerability in Action DispatchCVE-2023-22796Lowactivesupport: ReDoS based DoS vulnerability in Active Support's underscoreCVE-2023-22797Mediumactionpack: Open Redirect Vulnerability in Action PackCVE-2022-44566Highactiverecord: Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapterCVE-2023-22795Lowactionpack: ReDoS based DoS vulnerability in Action DispatchCVE-2023-22794Highactiverecord: SQL Injection Vulnerability via ActiveRecord commentsCVE-2022-44570Highrack: Denial of service via header parsing in RackCVE-2022-44572Lowrack: Denial of service via multipart parsing in RackCVE-2023-22799Lowglobalid: ReDoS based DoS vulnerability in GlobalIDCVE-2022-4891Mediumsisimai: Sisimai Inefficient Regular Expression Complexity vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo