RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2012-1988Mediumpuppet: Puppet Arbitrary Command Execution CVE-2012-1053Mediumpuppet: Puppet Privilege Escallation CVE-2013-3221Criticalactiverecord: Active Record component in Ruby on Rails has a data-type injection vulnerability CVE-2012-6497Mediumauthlogic: Authlogic Information Exposure vulnerability CVE-2018-18385Highasciidoctor: Asciidoctor Infinite Loop vulnerability CVE-2018-16395Criticalopenssl: Ruby Openssl Allows Incorrect Value Comparison CVE-2018-12615Mediumpassenger: Phusion Passenger incorrect permission assignment CVE-2018-12028Highpassenger: Incorrect Access Control in Phusion Passenger CVE-2018-12027Highpassenger: Insecure Permissions in Phusion Passenger CVE-2018-1000075Highrubygems-update: RubyGems Infinite Loop vulnerability CVE-2017-10689Mediumpuppet: Tarball permission preservation in puppet CVE-2016-10362Mediumlogstash-core: Logstash Logs Sensitive Information CVE-2017-0901Highrubygems-update: RubyGems may allow a maliciously crafted gem to overwrite files CVE-2017-0903Criticalrubygems-update: RubyGems vulnerable to Deserialization of Untrusted Data CVE-2017-0902Highrubygems-update: RubyGems has Origin Validation Error vulnerability CVE-2017-0899Criticalrubygems-update: RubyGems Code Injection vulnerability CVE-2017-2667Highhammer_cli_foreman: hammer_cli_foreman Improper Certificate Validation vulnerability CVE-2017-2662Mediumkatello: katello Improper Privilege Management vulnerability CVE-2018-14623Mediumkatello: katello SQL Injection vulnerability CVE-2017-14683Highgeminabox: Gem in a Box vulnerable to Cross-site Request Forgery CVE-2017-14506Mediumgeminabox: Gem in a Box vulnerable to Cross-site Scripting CVE-2017-16355Mediumpassenger: Phusion Passenger information disclosure CVE-2019-11068Criticalnokogiri: Nokogiri vulnerable to libxslt protection mechanism bypass CVE-2018-1000073Highrubygems-update: RubyGems Link Following vulnerability CVE-2017-2096Criticalsmalruby-editor: smalruby and smalruby-editor vulnerable to OS Command Injection

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo