RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2022-29181Highnokogiri: Nokogiri Improperly Handles Unexpected Data Type CVE-2019-25061Highrandom_password_generator: Insecure PRNG use in random_password_generator GHSA-CGX6-HPWQ-FHV5Highnokogiri: Integer Overflow or Wraparound in libxml2 affects Nokogiri CVE-2014-3211Highpublify_core: Publify vulnerable to DoS attack CVE-2014-0084Mediumopenshift-origin-node: openshift-origin-node Improper Input Validation vulnerability CVE-2008-7310Mediumspree: Spree does not properly restrict the use of a hash to provide values for a model's attributes CVE-2008-7311Mediumspree: Spree uses a hardcoded hash value CVE-2010-5142Mediumchef: Chef Improper Access Control vulnerability CVE-2013-2506Mediumspree_auth_devise: spree_auth_devise allows remote authenticated users to assign themselves arbitrary roles CVE-2012-3503Criticalkatello: Katello uses hard coded credential CVE-2012-2671Mediumrack-cache: Rack-Cache caches sensitive headers CVE-2011-5036Mediumrack: Rack Gem Subject to Denial of Service via Hash Collisions CVE-2013-4478Mediumsup: Sup Code Injection vulnerability CVE-2013-7225Mediumfat_free_crm: Fat Free CRM vulnerable to SQL Injection CVE-2013-7249Mediumfat_free_crm: Fat Free CRM vulnerable to Exposure of Sensitive Information CVE-2013-7224Mediumfat_free_crm: Fat Free CRM allows remote attackers to obtain sensitive information via a direct request CVE-2013-7223Mediumfat_free_crm: Fat Free CRM contains Cross-site Request Forgery vulnerablilities CVE-2013-7222Mediumfat_free_crm: Fat Free CRM has fixed token value CVE-2012-2125Mediumrubygems-update: RubyGems HTTPS to HTTP redirect CVE-2012-2126Mediumrubygems-update: RubyGems does not verify SSL certificate CVE-2014-0135Lowkafo: Kafo allows local users to obtain passwords and other sensitive information by reading default_values.yaml CVE-2013-4489Mediumgitlab-grit: GitLab Grit Gem for Ruby contains a flaw allowing arbitrary commands to be executed CVE-2014-5441Mediumfat_free_crm: Fat Free CRM subject to Cross-site Scripting CVE-2013-4479Mediumsup: Sup Code Injection vulnerability CVE-2013-1933Highkarteek-docsplit: Karteek Docsplit vulnerable to OS Command Injection

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.