RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2009-3287Highthin: High severity vulnerability that affects thinCVE-2009-4214Mediumrails: Moderate severity vulnerability that affects railsCVE-2009-4492Mediumwebrick: WEBrick Improper Input Validation vulnerabilityCVE-2010-3933Mediumactiverecord: Rails activerecord gem has Improper Input Validation vulnerabilityCVE-2010-5312Mediumjquery-ui: Cross-site Scripting in jquery-uiCVE-2011-0446Mediumactionpack: Rails actionpack gem vulnerable to Cross-site ScriptingCVE-2011-0447Mediumactionpack: actionpack Cross-Site Request Forgery vulnerabilityCVE-2011-0448Highactiverecord: activerecord vulnerable to SQL InjectionCVE-2011-0449Highactionpack: actionpack allows remote attackers to bypass intended access restrictionsCVE-2011-0739Mediummail: Mail Improper Input Validation vulnerabilityCVE-2011-0995Lowsqlite3-ruby: sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privilegesCVE-2011-2197Mediumactionpack: rails Cross-site Scripting vulnerabilityCVE-2011-2929Mediumactionpack: actionpack Improper Input Validation vulnerabilityCVE-2011-2930Highactiverecord: activerecord vulnerable to SQL InjectionCVE-2011-2931Mediumactionpack: actionpack Cross-site Scripting vulnerabilityCVE-2011-2932Mediumactivesupport: activesupport Cross-site Scripting vulnerabilityCVE-2011-3186Mediumactionpack: actionpack CRLF injection vulnerabilityCVE-2011-3187Mediumactionpack: actionpack Improper Input Validation vulnerabilityCVE-2011-4319Mediumactionpack: Cross-site Scripting vulnerability in i18n translations helper methodCVE-2012-1098Mediumactivesupport: activesupport Cross-site Scripting vulnerabilityCVE-2012-1099Mediumactionpack: Cross-site Scripting in actionpackCVE-2012-1989Lowpuppet: Puppet allows local users to overwrite arbitrary files via a symlink attackCVE-2012-2139Mediummail: Mail Gem Path Traversal vulnerabilityCVE-2012-2140Highmail: Mail Gem Improper Input Validation vulnerabilityCVE-2012-2660Mediumactionpack: Action Pack contains database-query restrictions bypass

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo