RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2012-3867Mediumpuppet: Pupper does not properly restrict characters in Common Name field of Certificate Signing Request CVE-2012-6109Mediumrack: Rack vulnerable to REDoS CVE-2012-6134Mediumomniauth-oauth2: omniauth-oauth2 Cross-Site Request Forgery vulnerability CVE-2012-6496Highactiverecord: Active Record contains SQL Injection CVE-2012-6662Mediumjquery-ui: jquery-ui Tooltip widget vulnerable to XSS CVE-2012-6684Mediumredcloth: RedCloth Cross-site Scripting vulnerability CVE-2013-0155Mediumactiverecord: Active Record allows bypassing of database-query restrictions CVE-2013-0156Highactionpack: actionpack Improper Input Validation vulnerability CVE-2013-0175Highmulti_xml: Improper Input Validation in multi_xml CVE-2013-0183Mediumrack: Rack rubygems receiving excessively long lines triggers out-of-memory error CVE-2013-0233Mediumdevise: Devise does not properly perform type conversion when performing database queries CVE-2013-0256Mediumrdoc: RDoc contains XSS vulnerability CVE-2013-0262Mediumrack: Rack Vulnerable to Path Traversal CVE-2013-0269Highjson: JSON gem has Improper Input Validation vulnerability CVE-2013-0276Mediumactiverecord: ActiveRecord vulnerable to modification of protected model attributes CVE-2013-0277Criticalactiverecord: Active Record contains deserialization of arbitrary YAML CVE-2013-0284Mediumnewrelic_rpm: newrelic_rpm Gem Discloses Sensitive Information CVE-2013-0285Highnori: nori contains Improper Input Validation CVE-2013-0333Highactivesupport: activesupport in Rails vulnerable to incorrect data conversion CVE-2013-1655Highpuppet: Puppet Improper Input Validation vulnerability CVE-2013-1656Mediumspree: Spree Improper Input Validation vulnerability CVE-2013-1756Highdragonfly: Dragonfly Code Injection vulnerability CVE-2013-1800Highcrack: crack does not properly restrict casts of string values CVE-2013-1801Highhttparty: HTTParty does not restrict casts of string values CVE-2013-1802Highextlib: extlib does not properly restrict casts of string values

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.