RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2019-17383Criticalnetaddr: netaddr before 1.5.3 and 2.0.4 has Incorrect Default Permissions CVE-2024-22050Highiodine: Malicious URL drafting attack against iodines static file server may allow path traversal CVE-2019-16676Criticalsimple_form: Improper Input Validation in simple_form CVE-2019-16892Mediumrubyzip: Rubyzip denial of service CVE-2019-16377Criticalconsul: Consul gem insufficient authentication check - Multiple powers in one controller are not always checked correctly CVE-2019-16145Mediumpadrino-contrib: Cross-site scripting in padrino-contrib CVE-2019-16109Mediumdevise: Authentication Bypass in Devise CVE-2019-16060Criticalairbrake-ruby: Airbrake keys not being filtered CVE-2018-20975Mediumfat_free_crm: Cross-site scripting in fat_free_crm CVE-2019-15224Criticalrest-client: rest-client Gem Contains Malicious Code CVE-2019-5477Criticalnokogiri: Nokogiri Command Injection Vulnerability CVE-2018-20857Highsamlr: samlr XML nodes comment attack CVE-2019-14281Criticaldatagrid: datagrid contains code Injection backdoor CVE-2019-14282Criticalsimple_captcha2: Code backdoor in simple_captcha2 CVE-2019-1010191Criticalmarginalia: SQL Injection in marginalia CVE-2019-1010266Mediumlodash: Regular Expression Denial of Service (ReDoS) in lodash CVE-2019-13574Highmini_magick: OS Command Injection in MiniMagick CVE-2019-13146Mediumfield_test: field_test gem contains injection vulnerability CVE-2019-13589Criticalparanoid2: paranoid2 gem Code backdoor CVE-2019-1010306Criticalslanger: Slanger Arbitrary command execution CVE-2019-10744Criticallodash: Prototype Pollution in lodash CVE-2019-13354Criticalstrong_password: strong_password Ruby gem malicious version causing Remote Code Execution vulnerability CVE-2017-11430Highomniauth-saml: OmniAuth-SAML authentication bypass via incorrect XML canonicalization and DOM traversal CVE-2017-11428Highruby-saml: Ruby-SAML Improper Authentication vulnerability CVE-2019-1020001Highyard: Path Traversal vulnerability that affects yard

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo