RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-32511Criticaljmespath: JMESPath for Ruby uses unsafe JSON.load when safe JSON.parse is preferableCVE-2022-31026Mediumtrilogy: Use of Uninitialized Variable in trilogyCVE-2021-33473Criticaldragonfly: Arbitrary file write in dragonflyCVE-2022-31000Lowsolidus_backend: CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backendCVE-2022-30122Highrack: Denial of Service Vulnerability in Rack Multipart ParsingCVE-2022-30123Criticalrack: Possible shell escape sequence injection vulnerability in RackCVE-2021-25969Mediumcamaleon_cms: Camaleon CMS Stored Cross-site Scripting vulnerabilityCVE-2021-25974Mediumpublify_core: Cross site scripting in publifyCVE-2021-25970Highcamaleon_cms: Camaleon CMS Insufficient Session Expiration vulnerabilityCVE-2021-25975Mediumpublify_core: Cross site scripting in publifyCVE-2014-0083Mediumnet-ldap: net-ldap has weak salt when generating passwordsCVE-2021-25971Mediumcamaleon_cms: Camaleon CMS vulnerable to Uncaught ExceptionCVE-2021-25972Mediumcamaleon_cms: Camaleon CMS vulnerable to Server-Side Request ForgeryCVE-2021-39880Mediumapollo_upload_server: apollo_upload_server has Denial of Service vulnerabilityCVE-2021-30560Highnokogiri: Nokogiri has vulnerable dependencies on libxml2 and libxsltCVE-2021-35440Mediumsmashing: Smashing Cross-site Scripting vulnerabilityCVE-2021-3517Highnokogiri: Nokogiri contains libxml Out-of-bounds Write vulnerabilityCVE-2021-3518Highnokogiri: Nokogiri Implements libxml2 version vulnerable to use-after-freeCVE-2021-3537Mediumnokogiri: Nokogiri Implements libxml2 version vulnerable to null pointer dereferencingCVE-2020-7385Highmetasploit-framework: Metasploit Framework user exposes Metasploit to same deserialization issue that is exploited by that moduleCVE-2020-13353Lowgitaly: Gitaly Insufficient Session Expiration vulnerabilityCVE-2020-25613Highwebrick: WEBRick vulnerable to HTTP Request/Response SmugglingCVE-2019-17268Criticalomniauth-weibo-oauth2: omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third partyCVE-2015-2784Criticalpapercrop: papercrop does not properly handle crop inputCVE-2019-5815Highnokogiri: Nokogiri implementation of libxslt vulnerable to heap corruption

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo