RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2019-14825Lowkatello: Katello cleartext password storage issue CVE-2019-12408Highred-arrow: Missing Initialization of Resource in Apache Arrow CVE-2019-12410Highred-arrow: Missing Initialization of Resource in Apache Arrow CVE-2019-18197Highnokogiri: Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability CVE-2019-16751Mediumdevise_token_auth: Devise Token Auth vulnerable to Cross-site Scripting CVE-2019-7615Highelastic-apm: Elastic APM agent for Ruby vulnerable to Improper Certificate Validation CVE-2019-13118Highnokogiri: libxslt Type Confusion vulnerability that affects Nokogiri CVE-2019-13117Mediumnokogiri: Uninitialized read in Nokogiri gem CVE-2022-1810Mediumpublify_core: Publify has Improper Access Controls CVE-2022-1811Criticalpublify_core: Publify vulnerable to cross site scripting CVE-2022-29181Highnokogiri: Nokogiri Improperly Handles Unexpected Data Type CVE-2019-25061Highrandom_password_generator: Insecure PRNG use in random_password_generator GHSA-CGX6-HPWQ-FHV5Highnokogiri: Integer Overflow or Wraparound in libxml2 affects Nokogiri CVE-2014-3211Highpublify_core: Publify vulnerable to DoS attack CVE-2014-0084Mediumopenshift-origin-node: openshift-origin-node Improper Input Validation vulnerability CVE-2008-7310Mediumspree: Spree does not properly restrict the use of a hash to provide values for a model's attributes CVE-2008-7311Mediumspree: Spree uses a hardcoded hash value CVE-2010-5142Mediumchef: Chef Improper Access Control vulnerability CVE-2013-2506Mediumspree_auth_devise: spree_auth_devise allows remote authenticated users to assign themselves arbitrary roles CVE-2012-3503Criticalkatello: Katello uses hard coded credential CVE-2012-2671Mediumrack-cache: Rack-Cache caches sensitive headers CVE-2011-5036Mediumrack: Rack Gem Subject to Denial of Service via Hash Collisions CVE-2013-4478Mediumsup: Sup Code Injection vulnerability CVE-2013-7225Mediumfat_free_crm: Fat Free CRM vulnerable to SQL Injection CVE-2013-7249Mediumfat_free_crm: Fat Free CRM vulnerable to Exposure of Sensitive Information

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.