RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2019-10842Criticalbootstrap-sass: Bootstrap-sass contains code execution backdoor CVE-2018-6517Highchloride: Improper Certificate Validation in chloride CVE-2019-9837Mediumdoorkeeper-openid_connect: Doorkeeper-openid_connect contains Open Redirect CVE-2019-5421Mediumdevise: devise Time-of-check Time-of-use Race Condition vulnerability CVE-2019-5420Criticalrailties: Use of Insufficiently Random Values in Railties Allows Remote Code Execution CVE-2019-5418Highactionview: Path Traversal in Action View CVE-2019-5419Highactionview: Denial of Service Vulnerability in Action View CVE-2019-8331Mediumbootstrap: Bootstrap Vulnerable to Cross-Site Scripting CVE-2018-16487Highlodash: Prototype Pollution in lodash CVE-2018-14404Highnokogiri: Nokogiri NULL Pointer Dereference CVE-2018-20677Mediumbootstrap: bootstrap Cross-site Scripting vulnerability CVE-2018-20676Mediumbootstrap: XSS vulnerability that affects bootstrap CVE-2016-10735Mediumbootstrap: Bootstrap Cross-site Scripting vulnerability CVE-2018-1000855Mediumeasymon: Cross Site Scripting (XSS) vulnerability in easymon CVE-2018-1000842Mediumfat_free_crm: Fat Free CRM vulnerable to Cross-site Scripting CVE-2018-16476Highactivejob: Improper Access Control in activejob CVE-2018-16477Mediumactivestorage: Exposure of Sensitive Information to an Unauthorized Actor in activestorage CVE-2018-16471Mediumrack: Rack vulnerable to Cross-site Scripting CVE-2018-16470Highrack: Rack vulnerable to Denial of Service CVE-2017-1000043Mediummapbox.js: Content Injection via TileJSON Name in mapbox.js CVE-2017-1000042Mediummapbox.js: Content Injection via TileJSON attribute in mapbox.js CVE-2018-16468Mediumloofah: Loofah Cross-site Scripting vulnerability CVE-2018-18476Criticalmysql-binuuid-rails: mysql-bunuuid-rails vulnerable to SQL injection CVE-2014-1832Lowpassenger: Insecure use of temporary files in Phusion passenger CVE-2014-1831Lowpassenger: Insecure use of temporary files in passenger

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo