RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2022-47318Highgit: Code injection in ruby git CVE-2015-10053Criticalcurupira: curupira is vulnerable to SQL injection CVE-2022-1812Criticalpublify_core: Integer overflow in publify_core CVE-2022-2815Mediumpublify_core: Publify Core does not strip metadata from images CVE-2023-0299Criticalpublify_core: Publify Improper Input Validation vulnerability CVE-2022-46648Highgit: ruby-git has potential remote code execution vulnerability CVE-2020-36644Mediuminline_svg: Inline SVG vulnerable to Cross-site Scripting CVE-2023-22626Highpghero: PgHero Allows Information Disclosure Through EXPLAIN Feature CVE-2024-22049Mediumhttparty: httparty has multipart/form-data request tampering vulnerability CVE-2017-20159Mediumkeynote: keynote Cross-site Scripting vulnerability CVE-2019-25088Mediumoxidized-web: Oxidized Web vulnerable to Cross-site Scripting CVE-2020-36624Mediumtext_helpers: text_helpers uses web link to untrusted target with window.opener access CVE-2021-4250Highactive_attr: active_attr Improper Resource Shutdown or Release vulnerability CVE-2022-23520Mediumrails-html-sanitizer: Possible XSS vulnerability with certain configurations of rails-html-sanitizer CVE-2022-23519Mediumrails-html-sanitizer: Possible XSS vulnerability with certain configurations of rails-html-sanitizer CVE-2022-23518Mediumrails-html-sanitizer: Improper neutralization of data URIs may allow XSS in rails-html-sanitizer CVE-2022-23517Highrails-html-sanitizer: Inefficient Regular Expression Complexity in rails-html-sanitizer CVE-2022-23516Highloofah: Uncontrolled Recursion in Loofah CVE-2022-23515Mediumloofah: Improper neutralization of data URIs may allow XSS in Loofah CVE-2022-23514Highloofah: Inefficient Regular Expression Complexity in Loofah CVE-2022-23476Highnokogiri: Unchecked return value from xmlTextReaderExpand CVE-2022-45442Highsinatra: Sinatra vulnerable to Reflected File Download attack CVE-2022-4064Lowdalli: Unsanitized input leading to code injection in Dalli CVE-2021-33621Highcgi: HTTP response splitting in CGI CVE-2022-39379Lowfluentd: fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.