RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2013-6461Mediumnokogiri: Nokogiri vulnerable to DoS while parsing XML entities CVE-2013-6460Mediumnokogiri: Nokogiri vulnerable to DoS while parsing XML documents CVE-2022-28481Criticalcsv-safe: CSV-Safe improperly filters special characters potentially leading to CSV injection CVE-2022-29970Highsinatra: sinatra does not validate expanded path matches CVE-2010-0156Lowpuppet: Puppet arbitrary files overwrite via a symlink attack CVE-2008-4310Highwebrick: WEBrick Denial of Service Vulnerability CVE-2007-6612Mediummongrel: Mongrel vulnerable to directory traversal via double-encoded sequences CVE-2007-0469Mediumrubygems-update: RubyGems file overwrite vulnerability CVE-2022-27777Mediumactionview: XSS Vulnerability in Action View tag helpers CVE-2022-22577Mediumactionpack: Cross-site Scripting Vulnerability in Action Pack CVE-2022-27311Criticalgibbon: Server side request forgery in gibbon CVE-2012-6685Highnokogiri: Nokogiri is vulnerable to XML External Entity (XXE) attack CVE-2012-6135Highpassenger: RubyGems passenger gem allows remote attackers to delete files CVE-2011-1497Mediumactionpack: Cross site scripting in actionpack Rubygem CVE-2022-29498Highblazer: SQL injection in blazer CVE-2022-25648Criticalgit: Command injection in ruby-git GHSA-GX8X-G87M-H5Q6Highnokogiri: Denial of Service (DoS) in Nokogiri on JRuby GHSA-XXX9-3XCR-GJJ3Mediumnokogiri: XML Injection in Xerces Java affects Nokogiri GHSA-V6GP-9MMM-C6P5Highnokogiri: Out-of-bounds Write in zlib affects Nokogiri CVE-2022-24836Highnokogiri: Nokogiri Inefficient Regular Expression Complexity CVE-2021-43177Mediumdevise-two-factor: Improper one time password handling in devise-two-factor CVE-2022-24795Mediumyajl-ruby: Buffer Overflow in yajl-ruby CVE-2022-21223Highcocoapods-downloader: Command injection in cocoapods-downloader CVE-2022-24440Highcocoapods-downloader: Command injection in cocoapods-downloader CVE-2022-24803Criticalasciidoctor-include-ext: Command Injection vulnerability in asciidoctor-include-ext

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.