RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2021-41182Mediumjquery-ui: XSS in the `altField` option of the Datepicker widget in jquery-ui CVE-2013-2512Criticalftpd: OS Command Injection in ftpd CVE-2021-41136Lowpuma: Puma with proxy which forwards LF characters as line endings could allow HTTP request smuggling CVE-2021-33575Criticalruby-jss: Remote code execution in ruby-jss CVE-2021-30151Mediumsidekiq: Cross-site Scripting in Sidekiq CVE-2021-41098Highnokogiri: Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby CVE-2021-23435Highclearance: Clearance Gem Open Redirect Vulnerability CVE-2021-39197Mediumbetter_errors: Older releases of better_errors open to Cross-Site Request Forgery attack CVE-2021-31799Highrdoc: Arbitrary Code Execution in Rdoc CVE-2021-22942Mediumactionpack: Open Redirect in ActionPack CVE-2021-28796Mediumqiita-markdown: Cross-Site Scripting in Qiita-Markdown CVE-2021-28833Mediumqiita-markdown: qiita-markdown Cross-site Scripting vulnerability CVE-2021-32740Highaddressable: Regular Expression Denial of Service in Addressable templates CVE-2021-35514Highnarou: Code injection in Narou CVE-2021-32823Mediumbindata: Potential Denial-of-Service in bindata CVE-2021-20259Highforeman_fog_proxmox: Exposure of Sensitive Information to an Unauthorized Actor in foreman_fog_proxmox CVE-2021-33564Criticaldragonfly: Dragonfly contains remote code execution vulnerability CVE-2020-7671Highgoliath: HTTP Request Smuggling in goliath CVE-2020-7659Highreel: HTTP Request Smuggling in reel CVE-2020-13482Highem-http-request: Improper Certificate Validation in EM-HTTP-Request CVE-2020-36327Highbundler: Dependency Confusion in Bundler CVE-2020-13163Highem-imap: Improper certificate validation in em-imap CVE-2021-29509Highpuma: Puma's Keepalive Connections Causing Denial Of Service GHSA-7RRM-V45F-JP64Mediumnokogiri: Nokogiri updates packaged dependency on libxml2 from 2.9.10 to 2.9.12 CVE-2019-3881Highbundler: Insecure path handling in Bundler

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo