rubygems-update vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2012-2125Mediumrubygems-update: RubyGems HTTPS to HTTP redirect CVE-2012-2126Mediumrubygems-update: RubyGems does not verify SSL certificate CVE-2013-4363Mediumrubygems-update: RubyGems Regular Expression Denial of Service CVE-2015-4020Mediumrubygems-update: RubyGems Improper Input Validation vulnerability CVE-2018-1000079Mediumrubygems-update: RubyGems Path Traversal vulnerability CVE-2015-3900Highrubygems-update: RubyGems vulnerable to DNS hijack attack CVE-2013-4287Mediumrubygems-update: RubyGems Regular Expression Denial of Service vulnerability CVE-2017-0900Highrubygems-update: RubyGems Improper Input Validation vulnerability CVE-2018-1000074Highrubygems-update: RubyGems Deserialization of Untrusted Data vulnerability CVE-2018-1000076Criticalrubygems-update: RubyGems Improper Verification of Cryptographic Signature vulnerability CVE-2018-1000078Mediumrubygems-update: RubyGems Cross-site Scripting vulnerability CVE-2018-1000077Mediumrubygems-update: RubyGems Improper Input Validation vulnerability CVE-2018-1000075Highrubygems-update: RubyGems Infinite Loop vulnerability CVE-2017-0901Highrubygems-update: RubyGems may allow a maliciously crafted gem to overwrite files CVE-2017-0903Criticalrubygems-update: RubyGems vulnerable to Deserialization of Untrusted Data CVE-2017-0902Highrubygems-update: RubyGems has Origin Validation Error vulnerability CVE-2017-0899Criticalrubygems-update: RubyGems Code Injection vulnerability CVE-2018-1000073Highrubygems-update: RubyGems Link Following vulnerability CVE-2007-0469Mediumrubygems-update: RubyGems file overwrite vulnerability CVE-2019-8325Highrubygems-update: RubyGems Escape sequence injection in errors CVE-2019-8320Highrubygems-update: RubyGems Delete directory using symlink when decompressing tar CVE-2019-8324Highrubygems-update: Code injection in RubyGems CVE-2019-8321Highrubygems-update: RubyGems Escape sequence injection vulnerability in verbose CVE-2019-8322Highrubygems-update: RubyGems Escape sequence injection vulnerability in gem owner CVE-2019-8323Highrubygems-update: RubyGems Escape sequence injection vulnerability in api response handling

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo