RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2014-4326Highlogstash: Elasticsearch Logstash allows remote attackers to execute arbitrary commands CVE-2016-1000221Highlogstash-core: Logstash Logs Sensitive Information CVE-2016-7954Criticalbundler: Bundler allows attacker to inject arbitrary code via secondary Gem source CVE-2011-3871Mediumpuppet: Puppet uses predictable filenames, allowing arbitrary file overwrite CVE-2011-0528Mediumpuppet: Puppet does not properly restrict access to node resources CVE-2011-3870Mediumpuppet: Puppet allows local users to modify the permissions of arbitrary files CVE-2011-3869Mediumpuppet: Puppet arbitrary file overwrite CVE-2015-1426Lowfacter: Puppet Labs Facter allows local users to obtain sensitive Amazon EC2 IAM instance metadata CVE-2012-1987Lowpuppet: Puppet Denial of Service and Arbitrary File Write CVE-2012-1906Mediumpuppet: Puppet uses predictable filenames, allowing arbitrary file overwrite CVE-2012-1988Mediumpuppet: Puppet Arbitrary Command Execution CVE-2012-1053Mediumpuppet: Puppet Privilege Escallation CVE-2013-3221Criticalactiverecord: Active Record component in Ruby on Rails has a data-type injection vulnerability CVE-2012-6497Mediumauthlogic: Authlogic Information Exposure vulnerability CVE-2018-18385Highasciidoctor: Asciidoctor Infinite Loop vulnerability CVE-2018-16395Criticalopenssl: Ruby Openssl Allows Incorrect Value Comparison CVE-2018-12615Mediumpassenger: Phusion Passenger incorrect permission assignment CVE-2018-12028Highpassenger: Incorrect Access Control in Phusion Passenger CVE-2018-12027Highpassenger: Insecure Permissions in Phusion Passenger CVE-2018-1000075Highrubygems-update: RubyGems Infinite Loop vulnerability CVE-2017-10689Mediumpuppet: Tarball permission preservation in puppet CVE-2016-10362Mediumlogstash-core: Logstash Logs Sensitive Information CVE-2017-0901Highrubygems-update: RubyGems may allow a maliciously crafted gem to overwrite files CVE-2017-0903Criticalrubygems-update: RubyGems vulnerable to Deserialization of Untrusted Data CVE-2017-0902Highrubygems-update: RubyGems has Origin Validation Error vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.