RubyGems vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2016-10193Criticalespeak-ruby: espeak-ruby allows arbitrary command execution CVE-2016-10194Criticalfestivaltts4r: festivaltts4r allows arbitrary command execution CVE-2016-2097Mediumactionview: actionview contains Path Traversal vulnerability CVE-2016-2098Highactionpack: actionpack allows remote code execution via application's unrestricted use of render method CVE-2016-3693Highsafemode: safemode gem allows context-dependent attackers to obtain sensitive information via the inspect method CVE-2016-4442Mediumrack-mini-profiler: rack-mini-profiler allows remote attackers to obtain sensitive information about allocated strings and objects CVE-2016-6316Mediumactionview: actionview Cross-site Scripting vulnerability CVE-2016-6317Highactiverecord: ActiveRecord in Ruby on Rails allows database-query bypass CVE-2016-6582Criticaldoorkeeper: Doorkeeper is vulnerable to replay attacks CVE-2016-7103Mediumjquery-ui: jQuery-UI vulnerable to Cross-site Scripting in dialog closeText CVE-2016-7798Highopenssl: OpenSSL gem for Ruby using inadequate encryption strength CVE-2017-5946Criticalrubyzip: Directory traversal vulnerability in RubyZip CVE-2017-7540Criticalsafemode: Safemode Gem Has Incomplete List of Disallowed Inputs

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo