RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2022-27311Criticalgibbon: Server side request forgery in gibbon CVE-2012-6685Highnokogiri: Nokogiri is vulnerable to XML External Entity (XXE) attack CVE-2012-6135Highpassenger: RubyGems passenger gem allows remote attackers to delete files CVE-2011-1497Mediumactionpack: Cross site scripting in actionpack Rubygem CVE-2022-29498Highblazer: SQL injection in blazer CVE-2022-25648Criticalgit: Command injection in ruby-git GHSA-GX8X-G87M-H5Q6Highnokogiri: Denial of Service (DoS) in Nokogiri on JRuby GHSA-XXX9-3XCR-GJJ3Mediumnokogiri: XML Injection in Xerces Java affects Nokogiri GHSA-V6GP-9MMM-C6P5Highnokogiri: Out-of-bounds Write in zlib affects Nokogiri CVE-2022-24836Highnokogiri: Nokogiri Inefficient Regular Expression Complexity CVE-2021-43177Mediumdevise-two-factor: Improper one time password handling in devise-two-factor CVE-2022-24795Mediumyajl-ruby: Buffer Overflow in yajl-ruby CVE-2022-21223Highcocoapods-downloader: Command injection in cocoapods-downloader CVE-2022-24440Highcocoapods-downloader: Command injection in cocoapods-downloader CVE-2022-24803Criticalasciidoctor-include-ext: Command Injection vulnerability in asciidoctor-include-ext CVE-2022-24790Criticalpuma: Puma vulnerable to HTTP Request Smuggling CVE-2018-25032Highnokogiri: Nokogiri affected by zlib's Out-of-bounds Write vulnerability CVE-2022-0759Highkubeclient: Improper Certificate Validation in kubeclient CVE-2021-3589Highforeman_ansible: Missing Authentication for Critical Function in Foreman Ansible CVE-2022-21831Criticalactivestorage: Possible code injection vulnerability in Rails / Active Storage CVE-2024-22051Highcommonmarker: Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption CVE-2022-24722Highview_component: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in view_component CVE-2022-24720Criticalimage_processing: Remote shell execution vulnerability in image_processing GHSA-FQ42-C5RG-92C2Highnokogiri: Vulnerable dependencies in Nokogiri CVE-2014-0177Mediumgithub.com/github/hub: Hub Package Arbitrary File Overwrite

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.