RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2017-0905Criticalrecurly: Recurly gem Server-Side Request Forgery in Resource#find method CVE-2017-1000248Criticalredis-store: redis-store deserializes untrusted data CVE-2017-0909Highprivate_address_check: private_address_check contains Incomplete List of Disallowed Inputs CVE-2017-0904Mediumprivate_address_check: private_address_check vulnerable to bypass of Resolv.getaddresses method CVE-2017-16792Mediumgeminabox: Geminabox contains Cross-site Scripting CVE-2017-16833Mediumgemirro: Gemirro Stored XSS in Gemspec "homepage" value CVE-2017-16516Highyajl-ruby: yajl-ruby gem Denial of Service vulnerability CVE-2017-15928Highox: Ox gem crashes due to a crafted input CVE-2014-9489Highgollum: gollum and gollum-lib allow remote authenticated users to execute arbitrary code CVE-2017-7475Mediumcairo: cairo is vulnerable to denial of service due to a null pointer dereference CVE-2017-8418Lowrubocop: RuboCop gem Insecure use of /tmp CVE-2006-2582Highrwiki: Remote code execution in rwiki CVE-2006-4111Highrails: Ruby on Rails vulnerable to code injection CVE-2006-4112Highrails: Rails Denial of Service vulnerability CVE-2007-3227Mediumrails: Moderate severity vulnerability that affects rails CVE-2007-5379Mediumrails: Moderate severity vulnerability that affects rails CVE-2007-5380Mediumrails: Session fixation vulnerability in Rails CVE-2007-6077Mediumrails: session fixation protection mechanism in cgi_process.rb in Rails CVE-2007-6183Mediumgtk2: gtk2 vulnerable to Use of Externally-Controlled Format String CVE-2008-4094Highactiverecord: Rails ActiveRecord gem vulnerable to SQL injection CVE-2008-5189Mediumrails: rails is vulnerable to CRLF injection CVE-2008-7248Mediumactionpack: Improper Input Validation in actionpack CVE-2009-2422Criticalrails: rails vulnerable to improper authentication CVE-2009-3009Mediumactionpack: Cross site scripting that affects rails CVE-2009-3086Mediumactionpack: actionpack and activesupport vulnerable to information leaks

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo