RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2017-8418Lowrubocop: RuboCop gem Insecure use of /tmpCVE-2006-2582Highrwiki: Remote code execution in rwikiCVE-2006-4111Highrails: Ruby on Rails vulnerable to code injectionCVE-2006-4112Highrails: Rails Denial of Service vulnerabilityCVE-2007-3227Mediumrails: Moderate severity vulnerability that affects railsCVE-2007-5379Mediumrails: Moderate severity vulnerability that affects railsCVE-2007-5380Mediumrails: Session fixation vulnerability in Rails CVE-2007-6077Mediumrails: session fixation protection mechanism in cgi_process.rb in RailsCVE-2007-6183Mediumgtk2: gtk2 vulnerable to Use of Externally-Controlled Format StringCVE-2008-4094Highactiverecord: Rails ActiveRecord gem vulnerable to SQL injectionCVE-2008-5189Mediumrails: rails is vulnerable to CRLF injectionCVE-2008-7248Mediumactionpack: Improper Input Validation in actionpackCVE-2009-2422Criticalrails: rails vulnerable to improper authenticationCVE-2009-3009Mediumactionpack: Cross site scripting that affects railsCVE-2009-3086Mediumactionpack: actionpack and activesupport vulnerable to information leaksCVE-2009-3287Highthin: High severity vulnerability that affects thinCVE-2009-4214Mediumrails: Moderate severity vulnerability that affects railsCVE-2009-4492Mediumwebrick: WEBrick Improper Input Validation vulnerabilityCVE-2010-3933Mediumactiverecord: Rails activerecord gem has Improper Input Validation vulnerabilityCVE-2010-5312Mediumjquery-ui: Cross-site Scripting in jquery-uiCVE-2011-0446Mediumactionpack: Rails actionpack gem vulnerable to Cross-site ScriptingCVE-2011-0447Mediumactionpack: actionpack Cross-Site Request Forgery vulnerabilityCVE-2011-0448Highactiverecord: activerecord vulnerable to SQL InjectionCVE-2011-0449Highactionpack: actionpack allows remote attackers to bypass intended access restrictionsCVE-2011-0739Mediummail: Mail Improper Input Validation vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo