RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2013-1812Mediumruby-openid: Denial of service in ruby-openid CVE-2013-1854Mediumactiverecord: Active Record Improper Input Validation CVE-2013-1855Mediumactionpack: actionpack Cross-site Scripting vulnerability CVE-2013-1856Mediumactivesupport: activesupport Improper Input Validation vulnerability CVE-2013-1857Mediumactionpack: actionpack Cross-site Scripting vulnerability CVE-2013-1875Highcommand_wrap: Shell command injection in command_wrap CVE-2013-1898Highthumbshooter: Thumbshooter vulnerable to Code Injection CVE-2013-1911Mediumldoce: ldoce Gem Arbitrary Command Execution CVE-2013-1947Criticalkelredd-pruview: Shell Metacharacter Injection in kelredd-pruview CVE-2013-1948Criticalmd2pdf: md2pdf allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename CVE-2013-2090Criticalcremefraiche: Creme Fraiche contains OS Command Injection CVE-2013-2105Mediumshow_in_browser: Script Injection in Show In Browser gem CVE-2013-2119Mediumpassenger: Phusion Passenger Denial of Service CVE-2013-2615Highfastreader: fastreader Gem for Ruby URI Handling Arbitrary Command Injection CVE-2013-2616Highmini_magick: MiniMagick Gem for Ruby URI Handling Arbitrary Command Injection CVE-2013-2617Highcurl: Curl Gem insufficient URL escaping command injection CVE-2013-3567Highpuppet: Puppet Improper Input Validation vulnerability CVE-2013-4136Mediumpassenger: insecure temporary directory usage in passenger CVE-2013-4203Highrgpg: rgpg Code Injection vulnerability CVE-2013-4389Mediumactionmailer: actionmailer email address processing causes Denial of service CVE-2013-4413Mediumwicked: Wicked gem contains Path traversal vulnerability CVE-2013-4457Mediumcocaine: Cocaine Gem OS Command Injection vulnerability CVE-2013-4491Mediumactionpack: actionpack vulnerable to Cross-site Scripting CVE-2013-4492Mediumi18n: i18n gem Cross-site Scripting vulnerability CVE-2013-4562Mediumomniauth-facebook: omniauth-facebook Cross-Site Request Forgery vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo