RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2013-2617Highcurl: Curl Gem insufficient URL escaping command injection CVE-2013-3567Highpuppet: Puppet Improper Input Validation vulnerability CVE-2013-4136Mediumpassenger: insecure temporary directory usage in passenger CVE-2013-4203Highrgpg: rgpg Code Injection vulnerability CVE-2013-4389Mediumactionmailer: actionmailer email address processing causes Denial of service CVE-2013-4413Mediumwicked: Wicked gem contains Path traversal vulnerability CVE-2013-4457Mediumcocaine: Cocaine Gem OS Command Injection vulnerability CVE-2013-4491Mediumactionpack: actionpack vulnerable to Cross-site Scripting CVE-2013-4492Mediumi18n: i18n gem Cross-site Scripting vulnerability CVE-2013-4562Mediumomniauth-facebook: omniauth-facebook Cross-Site Request Forgery vulnerability CVE-2013-4761Mediumpuppet: Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service CVE-2013-5647Highsounder: Sounder Contains Arbitrary Command Execution Vulnerability CVE-2013-5671Highdragonfly: Code injection in dragonfly gem CVE-2013-6414Mediumactionpack: actionpack Improper Input Validation vulnerability CVE-2013-6415Mediumactionpack: actionpack vulnerable to Cross-site Scripting CVE-2013-6416Mediumactionpack: actionpack Cross-site Scripting vulnerability CVE-2013-6417Mediumactionpack: actionpack allows bypass of database-query restrictions CVE-2013-6421Highsprout: sprout Arbitrary Code Execution vulnerability CVE-2013-6459Mediumwill_paginate: will_paginate Cross-site Scripting vulnerability CVE-2013-7086Highwebbynode: Webbynode Code Injection vulnerability CVE-2013-7111Mediumbio-basespace-sdk: Exposure of Sensitive Information in bio-basespace-sdk CVE-2013-7463Highaescrypt: Aescrypt does not sufficiently use random values CVE-2014-0036Mediumrbovirt: rbovirt uses the rest-client gem with SSL verification disabled CVE-2014-0080Mediumactiverecord: Array data injection vulnerability in activerecord CVE-2014-0081Mediumrails: Rails vulnerable to Cross-site Scripting

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo