RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2021-27023Mediumpuppet: Unsafe HTTP Redirect in Puppet Agent and Puppet ServerCVE-2021-41275Criticalspree_auth_devise: Spree Auth Devise vulnerability allows for authentication bypass through CSRF weaknessGHSA-5629-8855-GF4GCriticalsolidus_core: Authentication Bypass by CSRF Weakness CVE-2021-41274Criticalsolidus_auth_devise: Authentication Bypass by CSRF WeaknessCVE-2021-41817Highdate: Regular expression denial of service vulnerability (ReDoS) in dateCVE-2021-41263Mediumrails_multisite: Rails Multisite secure/signed cookies share secrets between sites in a multi-site applicationCVE-2021-25973Mediumpublify_core: Publify `guest` role users can self-register even when the admin does not allow itCVE-2021-41186Mediumfluentd: ReDoS vulnerability in parser_apache2CVE-2021-41183Mediumjquery-ui: XSS in `*Text` options of the Datepicker widget in jquery-uiCVE-2021-41184Mediumjquery-ui: XSS in the `of` option of the `.position()` util in jquery-uiCVE-2021-41182Mediumjquery-ui: XSS in the `altField` option of the Datepicker widget in jquery-uiCVE-2013-2512Criticalftpd: OS Command Injection in ftpdCVE-2021-41136Lowpuma: Puma with proxy which forwards LF characters as line endings could allow HTTP request smugglingCVE-2021-33575Criticalruby-jss: Remote code execution in ruby-jssCVE-2021-30151Mediumsidekiq: Cross-site Scripting in SidekiqCVE-2021-41098Highnokogiri: Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRubyCVE-2021-23435Highclearance: Clearance Gem Open Redirect VulnerabilityCVE-2021-39197Mediumbetter_errors: Older releases of better_errors open to Cross-Site Request Forgery attackCVE-2021-31799Highrdoc: Arbitrary Code Execution in RdocCVE-2021-22942Mediumactionpack: Open Redirect in ActionPackCVE-2021-28796Mediumqiita-markdown: Cross-Site Scripting in Qiita-MarkdownCVE-2021-28833Mediumqiita-markdown: qiita-markdown Cross-site Scripting vulnerabilityCVE-2021-32740Highaddressable: Regular Expression Denial of Service in Addressable templatesCVE-2021-35514Highnarou: Code injection in NarouCVE-2021-32823Mediumbindata: Potential Denial-of-Service in bindata

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo