RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2012-2661Mediumactiverecord: Active Record vulnerable to SQL Injection via nested query parametersCVE-2012-2694Mediumactionpack: actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted requestCVE-2012-2695Highactiverecord: activerecord vulnerable to SQL InjectionCVE-2012-3408Lowpuppet: Puppet supports use of IP addresses in certnames without warning of potential risksCVE-2012-3424Mediumactionpack: actionpack Improper Authentication vulnerabilityCVE-2012-3463Mediumactionpack: actionpack Cross-site Scripting vulnerabilityCVE-2012-3464Mediumactivesupport: activesupport Cross-site Scripting vulnerabilityCVE-2012-3465Mediumactionpack: actionpack Cross-site Scripting vulnerabilityCVE-2012-3865Lowpuppet: Puppet vulnerable to Path TraversalCVE-2012-3866Lowpuppet: Puppet allows local users to obtain sensitive configuration informationCVE-2012-3867Mediumpuppet: Pupper does not properly restrict characters in Common Name field of Certificate Signing RequestCVE-2012-6109Mediumrack: Rack vulnerable to REDoSCVE-2012-6134Mediumomniauth-oauth2: omniauth-oauth2 Cross-Site Request Forgery vulnerabilityCVE-2012-6496Highactiverecord: Active Record contains SQL InjectionCVE-2012-6662Mediumjquery-ui: jquery-ui Tooltip widget vulnerable to XSSCVE-2012-6684Mediumredcloth: RedCloth Cross-site Scripting vulnerabilityCVE-2013-0155Mediumactiverecord: Active Record allows bypassing of database-query restrictionsCVE-2013-0156Highactionpack: actionpack Improper Input Validation vulnerabilityCVE-2013-0175Highmulti_xml: Improper Input Validation in multi_xmlCVE-2013-0183Mediumrack: Rack rubygems receiving excessively long lines triggers out-of-memory errorCVE-2013-0233Mediumdevise: Devise does not properly perform type conversion when performing database queriesCVE-2013-0256Mediumrdoc: RDoc contains XSS vulnerabilityCVE-2013-0262Mediumrack: Rack Vulnerable to Path TraversalCVE-2013-0269Highjson: JSON gem has Improper Input Validation vulnerabilityCVE-2013-0276Mediumactiverecord: ActiveRecord vulnerable to modification of protected model attributes

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo