RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2013-0277Criticalactiverecord: Active Record contains deserialization of arbitrary YAML CVE-2013-0284Mediumnewrelic_rpm: newrelic_rpm Gem Discloses Sensitive Information CVE-2013-0285Highnori: nori contains Improper Input Validation CVE-2013-0333Highactivesupport: activesupport in Rails vulnerable to incorrect data conversion CVE-2013-1655Highpuppet: Puppet Improper Input Validation vulnerability CVE-2013-1656Mediumspree: Spree Improper Input Validation vulnerability CVE-2013-1756Highdragonfly: Dragonfly Code Injection vulnerability CVE-2013-1800Highcrack: crack does not properly restrict casts of string values CVE-2013-1801Highhttparty: HTTParty does not restrict casts of string values CVE-2013-1802Highextlib: extlib does not properly restrict casts of string values CVE-2013-1812Mediumruby-openid: Denial of service in ruby-openid CVE-2013-1854Mediumactiverecord: Active Record Improper Input Validation CVE-2013-1855Mediumactionpack: actionpack Cross-site Scripting vulnerability CVE-2013-1856Mediumactivesupport: activesupport Improper Input Validation vulnerability CVE-2013-1857Mediumactionpack: actionpack Cross-site Scripting vulnerability CVE-2013-1875Highcommand_wrap: Shell command injection in command_wrap CVE-2013-1898Highthumbshooter: Thumbshooter vulnerable to Code Injection CVE-2013-1911Mediumldoce: ldoce Gem Arbitrary Command Execution CVE-2013-1947Criticalkelredd-pruview: Shell Metacharacter Injection in kelredd-pruview CVE-2013-1948Criticalmd2pdf: md2pdf allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename CVE-2013-2090Criticalcremefraiche: Creme Fraiche contains OS Command Injection CVE-2013-2105Mediumshow_in_browser: Script Injection in Show In Browser gem CVE-2013-2119Mediumpassenger: Phusion Passenger Denial of Service CVE-2013-2615Highfastreader: fastreader Gem for Ruby URI Handling Arbitrary Command Injection CVE-2013-2616Highmini_magick: MiniMagick Gem for Ruby URI Handling Arbitrary Command Injection

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.