RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2014-0082Mediumactionpack: actionpack Improper Input Validation vulnerability CVE-2014-0130Highactionpack: actionpack Path Traversal vulnerability CVE-2014-1233Lowparatrooper-pingdom: Local API Login Credentials Disclosure in paratrooper-pingdom CVE-2014-1234Lowparatrooper-newrelic: Paratrooper-newrelic Exposes of Sensitive Information to an Unauthorized Actor CVE-2014-2322Higharabic-prawn: Arabic Prawn allows remote attackers to execute arbitrary commands via shell metacharacters CVE-2014-2538Mediumrack-ssl: rack-ssl Cross-site Scripting vulnerability CVE-2014-2888Highsfpagent: sfpagent Command Injection vulnerability CVE-2014-3248Mediumfacter: facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability CVE-2014-3482Highactiverecord: SQL Injection in Active Record CVE-2014-3483Highactiverecord: Active Record contains SQL Injection via improper range quoting CVE-2014-3514Highactiverecord: Active Record subject to strong parameters protection bypass CVE-2014-7818Mediumactionpack: actionpack vulnerable to Path Traversal CVE-2014-7819Mediumsprockets: sprockets vulnerable to Path Traversal CVE-2014-7829Mediumactionpack: Directory traversal vulnerability in actionpack CVE-2014-9490Mediumsentry-raven: sentry-raven allows remote attackers to cause a denial of service via a large exponent value in a scientific number CVE-2015-1840Mediumjquery-rails: jquery-rails and jquery-ujs subject to Exposure of Sensitive Information CVE-2015-2963Mediumpaperclip: paperclip Cross-site Scripting vulnerability CVE-2015-3224Mediumweb-console: Web Console (Ruby gem) contains whitelisted_ips bypass CVE-2015-3225Mediumrack: Rack vulnerable to Denial of Service via large parameter depth request CVE-2015-3226Mediumactivesupport: activesupport Cross-site Scripting vulnerability CVE-2015-3227Mediumactivesupport: activesupport vulnerable to Denial of Service via large XML document depth CVE-2015-3448Lowrest-client: rest-client allows local users to obtain sensitive information by reading the log CVE-2015-7541Criticalcolorscore: colorscore Command Injection vulnerability CVE-2015-7576Lowactionpack: actionpack is vulnerable to remote bypass authentication CVE-2015-7577Mediumactiverecord: Active Record Improper Access Control

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.