Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
rubygems Security Advisories
Loading...
Critical
Ecosystems: rubygems
Packages: csv-safe
Source: GitHub Advisory Database
Blast Radius: 18.5
Published: almost 2 years ago
GSA_kwCzR0hTQS1mNTVnLXg4cXEtMjU2Oc3X6Q
CSV-Safe improperly filters special characters potentially leading to CSV injectionEcosystems: rubygems
Packages: csv-safe
Source: GitHub Advisory Database
Blast Radius: 18.5
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: strong_password
Source: GitHub Advisory Database
Blast Radius: 18.3
Published: almost 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVoNXItZmZjNC1jNDU1
strong_password Ruby gem malicious version causing Remote Code Execution vulnerabilityEcosystems: rubygems
Packages: strong_password
Source: GitHub Advisory Database
Blast Radius: 18.3
Published: almost 5 years ago
Critical
Ecosystems: rubygems
Packages: katello
Source: GitHub Advisory Database
Blast Radius: 9.8
Published: almost 2 years ago
GSA_kwCzR0hTQS01eHYyLXE0NzUtcndyaM4AAfRW
Katello uses hard coded credentialEcosystems: rubygems
Packages: katello
Source: GitHub Advisory Database
Blast Radius: 9.8
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: openshift-origin-controller
Source: GitHub Advisory Database
Blast Radius: 11.2
Published: almost 2 years ago
GSA_kwCzR0hTQS03N3hxLTdjNnAtNnhwNs3gbA
RubyGem openshift-origin-controller is vulnerable to command injectionEcosystems: rubygems
Packages: openshift-origin-controller
Source: GitHub Advisory Database
Blast Radius: 11.2
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: simple_captcha2
Source: GitHub Advisory Database
Blast Radius: 22.2
Published: almost 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdnNmotcjI4bS03Mjkz
Code backdoor in simple_captcha2Ecosystems: rubygems
Packages: simple_captcha2
Source: GitHub Advisory Database
Blast Radius: 22.2
Published: almost 5 years ago
Critical
Ecosystems: rubygems
Packages: datagrid
Source: GitHub Advisory Database
Blast Radius: 20.8
Published: almost 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJxcDUtcGc3dy04MzJw
datagrid contains code Injection backdoorEcosystems: rubygems
Packages: datagrid
Source: GitHub Advisory Database
Blast Radius: 20.8
Published: almost 5 years ago
Critical
Ecosystems: rubygems
Packages: smart_proxy_dynflow
Source: GitHub Advisory Database
Blast Radius: 9.4
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWd4NWcteGN4ai1jeDJ3
smart_proxy_dynflow gem authentication bypass in Foreman remote execution featureEcosystems: rubygems
Packages: smart_proxy_dynflow
Source: GitHub Advisory Database
Blast Radius: 9.4
Published: over 5 years ago
Critical
Ecosystems: rubygems
Packages: pdfkit
Source: GitHub Advisory Database
Blast Radius: 32.2
Published: almost 2 years ago
GSA_kwCzR0hTQS0zOXY3LXhwcTQtODg4NM3hUQ
PDFKit Improper Input Validation vulnerabilityEcosystems: rubygems
Packages: pdfkit
Source: GitHub Advisory Database
Blast Radius: 32.2
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: ruby-saml
Source: GitHub Advisory Database
Blast Radius: 32.9
Published: 11 months ago
GSA_kwCzR0hTQS1yMzY0LTJwajQtcGY3Zs4AAzf1
ruby-saml vulnerable to XPath injectionEcosystems: rubygems
Packages: ruby-saml
Source: GitHub Advisory Database
Blast Radius: 32.9
Published: 11 months ago
Critical
Ecosystems: rubygems
Packages: rack
Source: GitHub Advisory Database
Blast Radius: 60.2
Published: almost 2 years ago
GSA_kwCzR0hTQS13cTRoLTdyNDItNWhycs4AArQV
Possible shell escape sequence injection vulnerability in RackEcosystems: rubygems
Packages: rack
Source: GitHub Advisory Database
Blast Radius: 60.2
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: netaddr
Source: GitHub Advisory Database
Blast Radius: 28.7
Published: over 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTQ5cGotNjl2Zi1jNjg5
netaddr before 1.5.3 and 2.0.4 has Incorrect Default PermissionsEcosystems: rubygems
Packages: netaddr
Source: GitHub Advisory Database
Blast Radius: 28.7
Published: over 4 years ago
Critical
Ecosystems: rubygems
Packages: simple_form
Source: GitHub Advisory Database
Blast Radius: 48.3
Published: over 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI3NHEtZ3hjZy03M2h4
Improper Input Validation in simple_formEcosystems: rubygems
Packages: simple_form
Source: GitHub Advisory Database
Blast Radius: 48.3
Published: over 4 years ago
Critical
Ecosystems: rubygems, npm
Packages: uglifier, uglify-js
Source: GitHub Advisory Database
Blast Radius: 119.3
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM0cjctcTQ5Zi1oMzdj
Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-jsEcosystems: rubygems, npm
Packages: uglifier, uglify-js
Source: GitHub Advisory Database
Blast Radius: 119.3
Published: over 6 years ago
Critical
Ecosystems: rubygems
Packages: geocoder
Source: GitHub Advisory Database
Blast Radius: 42.2
Published: almost 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg2NGotNnFwcC1jbXJy
SQL Injection in GeocoderEcosystems: rubygems
Packages: geocoder
Source: GitHub Advisory Database
Blast Radius: 42.2
Published: almost 4 years ago
Critical
Ecosystems: rubygems
Packages: bolt
Source: GitHub Advisory Database
Blast Radius: 27.3
Published: 7 months ago
GSA_kwCzR0hTQS0yODltLTI5NjQtZjhxNc4AA2Rv
Puppet Bolt privilege escalation vulnerabilityEcosystems: rubygems
Packages: bolt
Source: GitHub Advisory Database
Blast Radius: 27.3
Published: 7 months ago
Critical
Ecosystems: rubygems
Packages: omniauth_amazon, coming-soon, bitcoin_vanity, capistrano-colors, doge-coin, awesome-bot, blockchain_wallet, coin_base, cron_parser, rest-client
Source: GitHub Advisory Database
Blast Radius: 49.0
Published: over 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTMzM2ctcnByNC03aHhx
rest-client Gem Contains Malicious CodeEcosystems: rubygems
Packages: omniauth_amazon, coming-soon, bitcoin_vanity, capistrano-colors, doge-coin, awesome-bot, blockchain_wallet, coin_base, cron_parser, rest-client
Source: GitHub Advisory Database
Blast Radius: 49.0
Published: over 4 years ago
Critical
Ecosystems: rubygems
Packages: redis-store
Source: GitHub Advisory Database
Blast Radius: 37.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ3NjctNTI2cC1nbTcz
redis-store deserializes untrusted dataEcosystems: rubygems
Packages: redis-store
Source: GitHub Advisory Database
Blast Radius: 37.0
Published: over 6 years ago
Critical
Ecosystems: rubygems
Packages: puma
Source: GitHub Advisory Database
Blast Radius: 54.9
Published: 9 months ago
GSA_kwCzR0hTQS02OHhnLWdxcW0tdmdqOM4AA1Yw
Puma HTTP Request/Response Smuggling vulnerabilityEcosystems: rubygems
Packages: puma
Source: GitHub Advisory Database
Blast Radius: 54.9
Published: 9 months ago
Critical
Ecosystems: rubygems
Packages: actionpack-page_caching
Source: GitHub Advisory Database
Blast Radius: 30.6
Published: almost 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1nNXAtOTVtOS1ybWZw
Arbitrary file write in actionpack-page_caching gemEcosystems: rubygems
Packages: actionpack-page_caching
Source: GitHub Advisory Database
Blast Radius: 30.6
Published: almost 4 years ago
Critical
Ecosystems: rubygems
Packages: slanger
Source: GitHub Advisory Database
Blast Radius: 10.2
Published: almost 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJnMzItbTNoZi03NzJ2
Slanger Arbitrary command executionEcosystems: rubygems
Packages: slanger
Source: GitHub Advisory Database
Blast Radius: 10.2
Published: almost 5 years ago
Critical
Ecosystems: rubygems
Packages: cremefraiche
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW02ZjctNDZody1ncmNq
Creme Fraiche contains OS Command InjectionEcosystems: rubygems
Packages: cremefraiche
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: over 6 years ago
Critical
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 36.3
Published: almost 2 years ago
GSA_kwCzR0hTQS1tYzZqLWg5NDgtdjJwNs4AATbI
RubyGems Improper Verification of Cryptographic Signature vulnerabilityEcosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 36.3
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: puma
Source: GitHub Advisory Database
Blast Radius: 51.0
Published: about 2 years ago
GSA_kwCzR0hTQS1oOTl3LTlxNXItZ2pxOc028Q
Puma vulnerable to HTTP Request SmugglingEcosystems: rubygems
Packages: puma
Source: GitHub Advisory Database
Blast Radius: 51.0
Published: about 2 years ago
Critical
Ecosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: over 2 years ago
GSA_kwCzR0hTQS02bXFyLXE4NnEtNmd3cs0XUw
Authentication Bypass by CSRF WeaknessEcosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: over 2 years ago
Critical
Ecosystems: rubygems
Packages: activerecord
Source: GitHub Advisory Database
Blast Radius: 58.4
Published: almost 2 years ago
GSA_kwCzR0hTQS0zaGhjLXFwNXYtOXAyas4AAtT8
Active Record RCE bug with Serialized ColumnsEcosystems: rubygems
Packages: activerecord
Source: GitHub Advisory Database
Blast Radius: 58.4
Published: almost 2 years ago
Critical
Ecosystems: npm, rubygems
Packages: handlebars, bootstrap-wysihtml5-rails
Source: GitHub Advisory Database
Blast Radius: 87.7
Published: over 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXc0NTctNnE2eC1jZ3A5
Prototype Pollution in handlebarsEcosystems: npm, rubygems
Packages: handlebars, bootstrap-wysihtml5-rails
Source: GitHub Advisory Database
Blast Radius: 87.7
Published: over 4 years ago
Critical
Ecosystems: rubygems
Packages: ruby-openid
Source: GitHub Advisory Database
Blast Radius: 37.7
Published: almost 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZxZmotY21oNi1oajQ5
ruby-openid SSRF via claimed_id requestEcosystems: rubygems
Packages: ruby-openid
Source: GitHub Advisory Database
Blast Radius: 37.7
Published: almost 5 years ago
Critical
Ecosystems: rubygems
Packages: mysql-binuuid-rails
Source: GitHub Advisory Database
Blast Radius: 8.3
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZqNjMtMzVoai12bWNn
mysql-bunuuid-rails vulnerable to SQL injectionEcosystems: rubygems
Packages: mysql-binuuid-rails
Source: GitHub Advisory Database
Blast Radius: 8.3
Published: over 5 years ago
Critical
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: almost 2 years ago
GSA_kwCzR0hTQS1tcXdyLTRxZjItMmhjds4AARmu
RubyGems vulnerable to Deserialization of Untrusted DataEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: kramdown
Source: GitHub Advisory Database
Blast Radius: 55.7
Published: over 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1xbTItY2dwci1wNG02
Unintended read access in kramdown gemEcosystems: rubygems
Packages: kramdown
Source: GitHub Advisory Database
Blast Radius: 55.7
Published: over 3 years ago
Critical
Ecosystems: rubygems
Packages: geokit-rails
Source: GitHub Advisory Database
Blast Radius: 29.8
Published: 7 months ago
GSA_kwCzR0hTQS03eHZjLXY0NGotNDZmaM4AA2RG
geokit-rails Command Injection vulnerabilityEcosystems: rubygems
Packages: geokit-rails
Source: GitHub Advisory Database
Blast Radius: 29.8
Published: 7 months ago
Critical
Ecosystems: rubygems
Packages: safemode
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV2eDUtOXE3My13Z3A0
Safemode Gem Has Incomplete List of Disallowed InputsEcosystems: rubygems
Packages: safemode
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 6 years ago
Critical
Ecosystems: rubygems
Packages: consul
Source: GitHub Advisory Database
Blast Radius: 14.6
Published: over 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThqaHgtOWdmNC1oaGY1
Consul gem insufficient authentication check - Multiple powers in one controller are not always checked correctlyEcosystems: rubygems
Packages: consul
Source: GitHub Advisory Database
Blast Radius: 14.6
Published: over 4 years ago
Critical
Ecosystems: rubygems
Packages: puppet
Source: GitHub Advisory Database
Blast Radius: 40.1
Published: almost 2 years ago
GSA_kwCzR0hTQS1wcWo1LTdyODYtNjRmds3svQ
Puppet Improper Access ControlEcosystems: rubygems
Packages: puppet
Source: GitHub Advisory Database
Blast Radius: 40.1
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: jmespath
Source: GitHub Advisory Database
Blast Radius: 44.7
Published: almost 2 years ago
GSA_kwCzR0hTQS01YzVmLTd2ZnEtMzczMs4AArZl
JMESPath for Ruby uses unsafe JSON.load when safe JSON.parse is preferableEcosystems: rubygems
Packages: jmespath
Source: GitHub Advisory Database
Blast Radius: 44.7
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: git-fastclone
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1mNnctNDVjZi1xaG1w
Git-fastclone passes user modifiable strings directly to a shell commandEcosystems: rubygems
Packages: git-fastclone
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 5 years ago
Critical
Ecosystems: rubygems
Packages: espeak-ruby
Source: GitHub Advisory Database
Blast Radius: 17.1
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTRqbTMtcGZwZi1oNTRw
espeak-ruby allows arbitrary command executionEcosystems: rubygems
Packages: espeak-ruby
Source: GitHub Advisory Database
Blast Radius: 17.1
Published: over 6 years ago
Critical
Ecosystems: rubygems
Packages: bson
Source: GitHub Advisory Database
Blast Radius: 42.0
Published: about 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg2cmotOHIzYy05Z3Bq
bson is vulnerable to denial of service due to incorrect regex validationEcosystems: rubygems
Packages: bson
Source: GitHub Advisory Database
Blast Radius: 42.0
Published: about 6 years ago
Critical
Ecosystems: rubygems
Packages: gibbon
Source: GitHub Advisory Database
Blast Radius: 32.5
Published: about 2 years ago
GSA_kwCzR0hTQS12eDlnLTM3N3gteHd4cc1BDg
Server side request forgery in gibbonEcosystems: rubygems
Packages: gibbon
Source: GitHub Advisory Database
Blast Radius: 32.5
Published: about 2 years ago
Critical
Ecosystems: rubygems
Packages: festivaltts4r
Source: GitHub Advisory Database
Blast Radius: 10.6
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY3ZjQtNXc5ai0yM3Ay
festivaltts4r allows arbitrary command executionEcosystems: rubygems
Packages: festivaltts4r
Source: GitHub Advisory Database
Blast Radius: 10.6
Published: over 6 years ago
Critical
Ecosystems: rubygems
Packages: passenger
Source: GitHub Advisory Database
Blast Radius: 34.5
Published: almost 2 years ago
GSA_kwCzR0hTQS03Y3YzLWd2bWMtOG1xNc4AAUCS
Phusion Passenger SpawningKit Contains Arbitrary Read/Write VulnerabilityEcosystems: rubygems
Packages: passenger
Source: GitHub Advisory Database
Blast Radius: 34.5
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: paranoid2
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: almost 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTRnNGMtOGdxaC1tNHZt
paranoid2 gem Code backdoorEcosystems: rubygems
Packages: paranoid2
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: almost 5 years ago
Critical
Ecosystems: rubygems
Packages: rubyzip
Source: GitHub Advisory Database
Blast Radius: 57.1
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZxY3EtbXJtdy1tY21n
Rubyzip gem contains a Directory Traversal vulnerability in zip file componentEcosystems: rubygems
Packages: rubyzip
Source: GitHub Advisory Database
Blast Radius: 57.1
Published: over 5 years ago
Critical
Ecosystems: rubygems
Packages: active-support
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJqNTUtcGN3NS14NGgy
active-support impersonates 'activesupport' gemEcosystems: rubygems
Packages: active-support
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: over 5 years ago
Critical
Ecosystems: rubygems
Packages: activerecord
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZoajktY2pqaC0yN3Zt
Active Record contains deserialization of arbitrary YAMLEcosystems: rubygems
Packages: activerecord
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
Critical
Ecosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 59.2
Published: almost 2 years ago
GSA_kwCzR0hTQS1xeGNnLXhqamctNjZtas4AAQF8
Nokogiri vulnerable to libxslt protection mechanism bypassEcosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 59.2
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: activestorage
Source: GitHub Advisory Database
Blast Radius: 53.5
Published: about 2 years ago
GSA_kwCzR0hTQS13NzQ5LXAzdjYtaGNjcc0wwQ
Possible code injection vulnerability in Rails / Active StorageEcosystems: rubygems
Packages: activestorage
Source: GitHub Advisory Database
Blast Radius: 53.5
Published: about 2 years ago
Critical
Ecosystems: rubygems
Packages: asciidoctor-include-ext
Source: GitHub Advisory Database
Blast Radius: 28.7
Published: about 2 years ago
GSA_kwCzR0hTQS12MjIyLTZtcjQtcWoyOc03aw
Command Injection vulnerability in asciidoctor-include-extEcosystems: rubygems
Packages: asciidoctor-include-ext
Source: GitHub Advisory Database
Blast Radius: 28.7
Published: about 2 years ago
Critical
Ecosystems: rubygems
Packages: md2pdf
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk5Y2gtOG12cC1nN201
md2pdf allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filenameEcosystems: rubygems
Packages: md2pdf
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: over 6 years ago
Critical
Ecosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: over 2 years ago
GSA_kwCzR0hTQS04eGZ3LTVxODItMzY1Ms0XVA
Authentication Bypass by CSRF WeaknessEcosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: over 2 years ago
Critical
Ecosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: over 2 years ago
GSA_kwCzR0hTQS0yNnh4LW00cTIteGhxOM0XUg
Authentication Bypass by CSRF WeaknessEcosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: over 2 years ago
Critical
Ecosystems: rubygems
Packages: solidus_auth_devise
Source: GitHub Advisory Database
Blast Radius: 25.6
Published: over 2 years ago
GSA_kwCzR0hTQS14bTM0LXY4NWgtOXBnMs0XUA
Authentication Bypass by CSRF WeaknessEcosystems: rubygems
Packages: solidus_auth_devise
Source: GitHub Advisory Database
Blast Radius: 25.6
Published: over 2 years ago
Critical
Ecosystems: rubygems
Packages: bibtex-ruby
Source: GitHub Advisory Database
Blast Radius: 32.0
Published: about 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM1cjUtN3BmaC02cWc2
BibTeX-Ruby vulnerable to OS command injectionEcosystems: rubygems
Packages: bibtex-ruby
Source: GitHub Advisory Database
Blast Radius: 32.0
Published: about 4 years ago
Critical
Ecosystems: rubygems
Packages: git
Source: GitHub Advisory Database
Blast Radius: 42.1
Published: about 2 years ago
GSA_kwCzR0hTQS02OXA2LXd2bXEtMjdnZ809lg
Command injection in ruby-gitEcosystems: rubygems
Packages: git
Source: GitHub Advisory Database
Blast Radius: 42.1
Published: about 2 years ago
Critical
Ecosystems: rubygems
Packages: restforce
Source: GitHub Advisory Database
Blast Radius: 22.5
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTUzNHctOTM3bS12N3gz
restforce vulnerable to Improper Input ValidationEcosystems: rubygems
Packages: restforce
Source: GitHub Advisory Database
Blast Radius: 22.5
Published: over 5 years ago
Critical
Ecosystems: rubygems
Packages: marginalia
Source: GitHub Advisory Database
Blast Radius: 28.7
Published: almost 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhyajUtcXA3eC1ycGc2
SQL Injection in marginaliaEcosystems: rubygems
Packages: marginalia
Source: GitHub Advisory Database
Blast Radius: 28.7
Published: almost 5 years ago
Critical
Ecosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: over 2 years ago
GSA_kwCzR0hTQS1ncHFjLTRwcDctNTk1NM0XVQ
Authentication Bypass by CSRF WeaknessEcosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: over 2 years ago
Critical
Ecosystems: rubygems
Packages: bootstrap-sass
Source: GitHub Advisory Database
Blast Radius: 50.9
Published: about 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZxcXYtdjltMi00OHAy
Bootstrap-sass contains code execution backdoorEcosystems: rubygems
Packages: bootstrap-sass
Source: GitHub Advisory Database
Blast Radius: 50.9
Published: about 5 years ago
Critical
Ecosystems: rubygems
Packages: paperclip
Source: GitHub Advisory Database
Blast Radius: 45.7
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVqY2YtYzVyZy1ybW04
paperclip Server-Side Request Forgery vulnerabilityEcosystems: rubygems
Packages: paperclip
Source: GitHub Advisory Database
Blast Radius: 45.7
Published: over 6 years ago
Critical
Ecosystems: rubygems, pypi
Packages: sha3, pysha3
Source: GitHub Advisory Database
Blast Radius: 48.7
Published: about 1 year ago
GSA_kwCzR0hTQS02dzRtLTJ4aGctMjY1OM4AAy-v
Buffer overflow in sponge queue functionsEcosystems: rubygems, pypi
Packages: sha3, pysha3
Source: GitHub Advisory Database
Blast Radius: 48.7
Published: about 1 year ago
Critical
Ecosystems: rubygems
Packages: camaleon_cms
Source: GitHub Advisory Database
Blast Radius: 12.5
Published: 11 months ago
GSA_kwCzR0hTQS14NDg3LTg2Nm0tcDhocs4AAze4
Server-Side Template Injection in Camaleon CMSEcosystems: rubygems
Packages: camaleon_cms
Source: GitHub Advisory Database
Blast Radius: 12.5
Published: 11 months ago
Critical
Ecosystems: rubygems
Packages: openssl
Source: GitHub Advisory Database
Blast Radius: 32.1
Published: almost 2 years ago
GSA_kwCzR0hTQS1tbXJxLTY5OTktNzJ2OM4AASvC
Ruby Openssl Allows Incorrect Value ComparisonEcosystems: rubygems
Packages: openssl
Source: GitHub Advisory Database
Blast Radius: 32.1
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: discordrb
Source: GitHub Advisory Database
Blast Radius: 24.7
Published: about 2 months ago
GSA_kwCzR0hTQS04ODMyLTRtbTUteDJyNs4AA6Aa
discordrb OS Command Injection vulnerabilityEcosystems: rubygems
Packages: discordrb
Source: GitHub Advisory Database
Blast Radius: 24.7
Published: about 2 months ago
Critical
Ecosystems: rubygems
Packages: ruby-jss
Source: GitHub Advisory Database
Blast Radius: 4.7
Published: over 2 years ago
GSA_kwCzR0hTQS12bWZoLWM1NDctdjQ1aM0WMA
Remote code execution in ruby-jssEcosystems: rubygems
Packages: ruby-jss
Source: GitHub Advisory Database
Blast Radius: 4.7
Published: over 2 years ago
Critical
Ecosystems: rubygems
Packages: railties
Source: GitHub Advisory Database
Blast Radius: 58.2
Published: about 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW00MmgtbWg4NS00cWdj
Use of Insufficiently Random Values in Railties Allows Remote Code ExecutionEcosystems: rubygems
Packages: railties
Source: GitHub Advisory Database
Blast Radius: 58.2
Published: about 5 years ago
Critical
Ecosystems: rubygems
Packages: dragonfly
Source: GitHub Advisory Database
Blast Radius: 32.9
Published: almost 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4NTgteHA1di1mOHh4
Dragonfly contains remote code execution vulnerabilityEcosystems: rubygems
Packages: dragonfly
Source: GitHub Advisory Database
Blast Radius: 32.9
Published: almost 3 years ago
Critical
Ecosystems: rubygems
Packages: rails
Source: GitHub Advisory Database
Blast Radius: 58.4
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJ4cTMtZ200cC01Zmo0
rails vulnerable to improper authenticationEcosystems: rubygems
Packages: rails
Source: GitHub Advisory Database
Blast Radius: 58.4
Published: over 6 years ago
Critical
Ecosystems: rubygems
Packages: solidus_core
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: over 2 years ago
GSA_kwCzR0hTQS01NjI5LTg4NTUtZ2Y0Z80XUQ
Authentication Bypass by CSRF WeaknessEcosystems: rubygems
Packages: solidus_core
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: over 2 years ago
Critical
Ecosystems: rubygems
Packages: colorscore
Source: GitHub Advisory Database
Blast Radius: 12.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTczcXctd3c2Mi1tNTR4
colorscore Command Injection vulnerabilityEcosystems: rubygems
Packages: colorscore
Source: GitHub Advisory Database
Blast Radius: 12.0
Published: over 6 years ago
Critical
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 8.9
Published: over 1 year ago
GSA_kwCzR0hTQS1yYzQyLWpnaGYtdnI4Zs4AAw-0
Integer overflow in publify_coreEcosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 8.9
Published: over 1 year ago
Critical
Ecosystems: rubygems
Packages: smalruby, smalruby-editor
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
GSA_kwCzR0hTQS1mNDg5LTY1NXIteDZncs35NQ
smalruby and smalruby-editor vulnerable to OS Command InjectionEcosystems: rubygems
Packages: smalruby, smalruby-editor
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: awesome_spawn
Source: GitHub Advisory Database
Blast Radius: 13.9
Published: almost 2 years ago
GSA_kwCzR0hTQS1xcHF3LW1jODUtcXZtOc4AAtDn
OS Command Injection in awesome spawnEcosystems: rubygems
Packages: awesome_spawn
Source: GitHub Advisory Database
Blast Radius: 13.9
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: ftpd
Source: GitHub Advisory Database
Blast Radius: 12.1
Published: over 2 years ago
GSA_kwCzR0hTQS03dnhyLTZjeGctajN4OM0WRw
OS Command Injection in ftpdEcosystems: rubygems
Packages: ftpd
Source: GitHub Advisory Database
Blast Radius: 12.1
Published: over 2 years ago
Critical
Ecosystems: rubygems
Packages: rubyzip
Source: GitHub Advisory Database
Blast Radius: 57.1
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdjcXEtdzZnci1oOWo5
Directory traversal vulnerability in RubyZipEcosystems: rubygems
Packages: rubyzip
Source: GitHub Advisory Database
Blast Radius: 57.1
Published: over 6 years ago
Critical
Ecosystems: rubygems
Packages: curupira
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
GSA_kwCzR0hTQS04NWdmLXdyNjctZjgzd84AAw_f
curupira is vulnerable to SQL injectionEcosystems: rubygems
Packages: curupira
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
Critical
Ecosystems: rubygems
Packages: flash_tool
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
GSA_kwCzR0hTQS02MzI1LTZnMzItN3AzNc4AAxNI
flash_tool Gem for Ruby File Download Handling Arbitrary Command ExecutionEcosystems: rubygems
Packages: flash_tool
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
Critical
Ecosystems: rubygems
Packages: dragonfly
Source: GitHub Advisory Database
Blast Radius: 30.5
Published: almost 2 years ago
GSA_kwCzR0hTQS1majM0LWpoangteG12ds4AArUb
Arbitrary file write in dragonflyEcosystems: rubygems
Packages: dragonfly
Source: GitHub Advisory Database
Blast Radius: 30.5
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: doorkeeper
Source: GitHub Advisory Database
Blast Radius: 34.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNtNnItMzlwMy1qcTI1
Doorkeeper is vulnerable to replay attacksEcosystems: rubygems
Packages: doorkeeper
Source: GitHub Advisory Database
Blast Radius: 34.0
Published: over 6 years ago
Critical
Ecosystems: rubygems
Packages: diffy
Source: GitHub Advisory Database
Blast Radius: 37.2
Published: almost 2 years ago
GSA_kwCzR0hTQS01d3c5LTlxcDIteDUyNM4AAs80
Improper handling of double quotes in file name in Diffy in Windows environmentEcosystems: rubygems
Packages: diffy
Source: GitHub Advisory Database
Blast Radius: 37.2
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: kelredd-pruview
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc4ajMtN3dwbS1xaHZw
Shell Metacharacter Injection in kelredd-pruviewEcosystems: rubygems
Packages: kelredd-pruview
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
Critical
Ecosystems: rubygems
Packages: cgi
Source: GitHub Advisory Database
Blast Radius: 26.4
Published: over 2 years ago
GSA_kwCzR0hTQS01Y3FtLWNyeG0tNnFwds0bSA
Buffer overrun in CGI.escape_htmlEcosystems: rubygems
Packages: cgi
Source: GitHub Advisory Database
Blast Radius: 26.4
Published: over 2 years ago
Critical
Ecosystems: rubygems
Packages: bundler
Source: GitHub Advisory Database
Blast Radius: 52.5
Published: almost 2 years ago
GSA_kwCzR0hTQS1qdmdtLXBmcXYtODg3eM4AATVs
Bundler allows attacker to inject arbitrary code via secondary Gem sourceEcosystems: rubygems
Packages: bundler
Source: GitHub Advisory Database
Blast Radius: 52.5
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: recurly
Source: GitHub Advisory Database
Blast Radius: 18.2
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXgyN3YteDIyNS1ncThn
Recurly gem Server-Side Request Forgery in Resource#find methodEcosystems: rubygems
Packages: recurly
Source: GitHub Advisory Database
Blast Radius: 18.2
Published: over 6 years ago
Critical
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 8.9
Published: over 1 year ago
GSA_kwCzR0hTQS1xM3JtLWY1MjctZ2h4as4AAw-1
Publify Improper Input Validation vulnerabilityEcosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 8.9
Published: over 1 year ago
Critical
Ecosystems: rubygems
Packages: airbrake-ruby
Source: GitHub Advisory Database
Blast Radius: 28.2
Published: over 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJwODItdjc3di1tcHBy
Airbrake keys not being filteredEcosystems: rubygems
Packages: airbrake-ruby
Source: GitHub Advisory Database
Blast Radius: 28.2
Published: over 4 years ago
Critical
Ecosystems: rubygems
Packages: rexical, nokogiri
Source: GitHub Advisory Database
Blast Radius: 59.2
Published: over 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNyNWotOTUzai14dzVw
Nokogiri Command Injection VulnerabilityEcosystems: rubygems
Packages: rexical, nokogiri
Source: GitHub Advisory Database
Blast Radius: 59.2
Published: over 4 years ago
Critical
Ecosystems: rubygems
Packages: fluentd
Source: GitHub Advisory Database
Blast Radius: 34.1
Published: almost 2 years ago
GSA_kwCzR0hTQS01anJwLXc4ZnItbXJ3d83uVQ
Fluentd Escape Sequence Injection VulnerabilityEcosystems: rubygems
Packages: fluentd
Source: GitHub Advisory Database
Blast Radius: 34.1
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: pdf_info
Source: GitHub Advisory Database
Blast Radius: 10.6
Published: about 1 year ago
GSA_kwCzR0hTQS05ZmgzLWo5OW0tZjR2N84AAxys
Code injection in pdf_infoEcosystems: rubygems
Packages: pdf_info
Source: GitHub Advisory Database
Blast Radius: 10.6
Published: about 1 year ago
Critical
Ecosystems: rubygems
Packages: rest-client
Source: GitHub Advisory Database
Blast Radius: 49.0
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNmaGYtNjkzOS1xZzhw
rest-client Gem Vulnerable to Session FixationEcosystems: rubygems
Packages: rest-client
Source: GitHub Advisory Database
Blast Radius: 49.0
Published: over 5 years ago
Critical
Ecosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 59.2
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZyNTItNGhxdy1wMjdm
Nokogiri does not forbid namespace nodes in XPointer rangesEcosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 59.2
Published: over 5 years ago
Critical
Ecosystems: rubygems
Packages: karo
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
GSA_kwCzR0hTQS1xZndxLWNoZjQtanZ3Z84AAUl6
karo Metacharacter Handling Remote Command ExecutionEcosystems: rubygems
Packages: karo
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 60.1
Published: almost 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJwNjgtZjc0di05d2M2
ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStoreEcosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 60.1
Published: almost 4 years ago
Critical
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 8.2
Published: almost 2 years ago
GSA_kwCzR0hTQS0zaHd4LWM2Y3AtcTk3Ms4AAgdi
Publify vulnerable to cross site scriptingEcosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 8.2
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: almost 2 years ago
GSA_kwCzR0hTQS03Z2NwLTJnbXEtdzN4aM4AARmK
RubyGems Code Injection vulnerabilityEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: omniauth
Source: GitHub Advisory Database
Blast Radius: 46.4
Published: over 1 year ago
GSA_kwCzR0hTQS1wbTU1LXFmeHItaDI0N84AAuFx
OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` valueEcosystems: rubygems
Packages: omniauth
Source: GitHub Advisory Database
Blast Radius: 46.4
Published: over 1 year ago
Critical
Ecosystems: rubygems
Packages: omniauth-weibo-oauth2
Source: GitHub Advisory Database
Blast Radius: 24.6
Published: almost 2 years ago
GSA_kwCzR0hTQS12cjIyLTQzZ2otcngzZs4AAjgN
omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third partyEcosystems: rubygems
Packages: omniauth-weibo-oauth2
Source: GitHub Advisory Database
Blast Radius: 24.6
Published: almost 2 years ago
Critical
Ecosystems: rubygems
Packages: image_processing
Source: GitHub Advisory Database
Blast Radius: 44.1
Published: about 2 years ago
GSA_kwCzR0hTQS1jeGY3LXFyYzUtOTQ0Ns0viw
Remote shell execution vulnerability in image_processingEcosystems: rubygems
Packages: image_processing
Source: GitHub Advisory Database
Blast Radius: 44.1
Published: about 2 years ago
Critical
Ecosystems: rubygems
Packages: pdfkit
Source: GitHub Advisory Database
Blast Radius: 32.2
Published: over 1 year ago
GSA_kwCzR0hTQS1yaHd4LWhqeDIteDRxcs4AAuuA
PDFKit vulnerable to Command InjectionEcosystems: rubygems
Packages: pdfkit
Source: GitHub Advisory Database
Blast Radius: 32.2
Published: over 1 year ago
Critical
Ecosystems: rubygems
Packages: papercrop
Source: GitHub Advisory Database
Blast Radius: 17.5
Published: almost 2 years ago
GSA_kwCzR0hTQS1tNDRyLWd2NnEtOWo5cs4AAjWq
papercrop does not properly handle crop inputEcosystems: rubygems
Packages: papercrop
Source: GitHub Advisory Database
Blast Radius: 17.5
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: matestack-ui-core
Source: GitHub Advisory Database
Blast Radius: 7.7
Published: about 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNqcXctdnY0NS1tamho
XSS/Script injection vulnerability in matestackEcosystems: rubygems
Packages: matestack-ui-core
Source: GitHub Advisory Database
Blast Radius: 7.7
Published: about 4 years ago
Statistics
Advisories: 18,317
Packages: 8,278
Repositories: 285
Ecosystems: 12
Packages: 8,278
Repositories: 285
Ecosystems: 12
Filter by Severity
Filter by Ecosystem
Filter by Package
actionpack
57
nokogiri
42
rubygems-update
25
puppet
23
rack
22
activerecord
21
activesupport
14
publify_core
14
passenger
13
actionview
12
puma
11
rails
11
jquery-rails
10
fat_free_crm
10
org.webjars.npm:jquery
9
rails-html-sanitizer
9
jquery
9
jQuery
8
decidim
7
org.jruby:jruby-stdlib
7
jquery-ui
7
jquery-ui-rails
7
org.webjars.npm:jquery-ui
7
jQuery.UI.Combined
7
ember-source
6
loofah
6
katello
6
camaleon_cms
6
doorkeeper
6
bundler
5
sidekiq
5
spree
5
commonmarker
5
spree_auth_devise
5
webrick
4
sanitize
4
avo
4
carrierwave
4
grpcio
4
grpc
4
dragonfly
4
activestorage
4
fluentd
4
devise
4
sinatra
4
mail
4
rdoc
3
rack-cors
3
openssl
3
rails_admin
3
resque
3
chartkick
3
io.grpc:grpc-protobuf
3
cgi
3
decidim-core
3
private_address_check
3
rest-client
3
gollum
3
git
3
omniauth
3
ruby-saml
3
bootstrap
3
yard
3
bootstrap
3
json-jwt
3
geminabox
3
rubyzip
3
phlex
3
facter
2
logstash-core
2
pageflow
2
git-fastclone
2
ox
2
httparty
2
json
2
VladTheEnterprising
2
bson
2
devise-two-factor
2
net-ldap
2
twitter-bootstrap-rails
2
mini_magick
2
paperclip
2
pdfkit
2
omniauth-facebook
2
yajl-ruby
2
safemode
2
ruby-openid
2
bootstrap-sass
2
mapbox-rails
2
mapbox.js
2
secure_headers
2
sprockets
2
faye
2
sup
2
echor
2
uri
2
field_test
2
i18n
2
kramdown
2
spina
2
view_component
2
solidus_core
2
redcarpet
2
solidus_frontend
2
radiant
2
cocoapods-downloader
2
pyarrow
2
red-arrow
2
activeadmin
2
google-protobuf
2
com.google.protobuf:protobuf-kotlin
2
com.google.protobuf:protobuf-java
2
qiita-markdown
2
decidim-templates
2
pghero
2
user_agent_parser
2
mechanize
2
administrate
2
blazer
1
solidus_auth_devise
1
kaminari
1
rmagick
1
solidus_backend
1
github.com/github/hub
1
hub
1
websocket-extensions
1
railties
1
foreman_ansible
1
gitlab-grit
1
geokit-rails
1
multi_xml
1
keynote
1
twitter-stream
1
pysha3
1
sha3
1
cap-strap
1
ruby-jss
1
rack-mini-profiler
1
hiera
1
mcollective-client
1
wicked
1
actionmailer
1
kelredd-pruview
1
sqlite3-ruby
1
thin
1
matestack-ui-core
1
restforce
1
ruby_parser
1
better_errors
1
mongrel
1
unpoly-rails
1
bindata
1
oxidized-web
1
github.com/pubnub/swift
1
pubnub
1
pubnub
1
pubnub/pubnub
1
pubnub
1
pubnub
1
Pubnub
1
github.com/pubnub/go/v5
1
github.com/pubnub/go/v6
1
github.com/pubnub/go
1
github.com/pubnub/go/v7
1
com.pubnub:pubnub
1
rubocop
1
ruby-mysql
1
gtk2
1
rotp
1
@turbo-boost/commands
1
turbo_boost-commands
1
stringio
1
discordrb
1
diffy
1
recurly
1
md2pdf
1
sounder
1
date
1
octopoller
1
paratrooper-newrelic
1
jmespath
1
trilogy
1
sentry-raven
1
devise_invitable
1
ftpd
1
tweetstream
1
flash_tool
1
lean-ruport
1
openshift-origin-node
1
point-cli
1
govuk_tech_docs
1
audited
1
omniauth-apple
1
spree_api
1
omniauth-auth0
1
shrine
1
message_bus
1
inline_svg
1
pdf_info
1
rswag
1
Filter by Repository
https://github.com/rails/rails
53
https://github.com/sparklemotion/nokogiri
31
https://github.com/rubygems/rubygems
18
https://github.com/rack/rack
17
https://github.com/puppetlabs/puppet
15
https://github.com/publify/publify
13
https://github.com/puma/puma
11
https://github.com/phusion/passenger
10
https://github.com/jquery/jquery
10
https://github.com/rails/rails-html-sanitizer
9
https://github.com/fatfreecrm/fat_free_crm
9
https://github.com/decidim/decidim
8
https://github.com/doorkeeper-gem/doorkeeper
6
https://github.com/flavorjones/loofah
6
https://github.com/jquery/jquery-ui
6
https://github.com/solidusio/solidus
5
https://github.com/solidusio/solidus_auth_devise
5
https://github.com/owen2345/camaleon-cms
4
https://github.com/mikel/mail
4
https://github.com/markevans/dragonfly
4
https://github.com/Katello/katello
4
https://github.com/ruby/openssl
4
https://github.com/avo-hq/avo
4
https://github.com/grpc/grpc
4
https://github.com/carrierwaveuploader/carrierwave
4
https://github.com/rgrove/sanitize
4
https://github.com/sinatra/sinatra
4
https://github.com/fluent/fluentd
4
https://github.com/sidekiq/sidekiq
3
https://github.com/rubygems/rubygems.org
3
https://github.com/ruby-git/ruby-git
3
https://github.com/rubyzip/rubyzip
3
https://github.com/resque/resque
3
https://github.com/spree/spree
3
https://github.com/phlex-ruby/phlex
3
https://github.com/rest-client/rest-client
3
https://github.com/geminabox/geminabox
3
https://github.com/cyu/rack-cors
3
https://github.com/twbs/bootstrap
3
https://github.com/gjtorikian/commonmarker
3
https://github.com/lsegal/yard
3
https://github.com/gollum/gollum
3
https://github.com/jtdowney/private_address_check
3
https://github.com/emberjs/ember.js
2
https://github.com/codevise/pageflow
2
https://github.com/CocoaPods/cocoapods-downloader
2
https://github.com/brianmario/yajl-ruby
2
https://github.com/ankane/pghero
2
https://github.com/ankane/field_test
2
https://github.com/ruby-ldap/ruby-net-ldap
2
https://github.com/ankane/chartkick
2
https://github.com/ruby/rdoc
2
https://github.com/ruby/uri
2
https://github.com/ruby/webrick
2
https://github.com/activeadmin/activeadmin
2
https://github.com/faye/faye
2
https://github.com/gettalong/kramdown
2
https://github.com/github/cmark-gfm
2
https://github.com/increments/qiita-markdown
2
https://github.com/jnunemaker/httparty
2
https://github.com/protocolbuffers/protobuf
2
https://github.com/plataformatec/devise
2
https://github.com/mongodb/bson-ruby
2
https://github.com/mperham/sidekiq
2
https://github.com/nov/json-jwt
2
https://github.com/openid/ruby-openid
2
https://github.com/omniauth/omniauth
2
https://github.com/ohler55/ox
2
https://github.com/vmg/redcarpet
2
https://github.com/sparklemotion/mechanize
2
https://github.com/twitter/secure_headers
2
https://github.com/square/git-fastclone
2
https://github.com/tinfoil/devise-two-factor
2
https://github.com/sup-heliotrope/sup
2
https://github.com/svenfuchs/i18n
2
https://github.com/svenfuchs/safemode
2
https://github.com/thoughtbot/paperclip
2
https://gitlab.com/gitlab-org/cves
2
https://github.com/github/view_component
1
https://github.com/github/trilogy
1
https://github.com/github/hub
1
https://github.com/twbs/bootstrap-sass
1
https://github.com/kaminari/kaminari
1
https://github.com/theforeman/ldap_fluff
1
https://github.com/getsentry/raven-ruby
1
https://github.com/geokit/geokit-rails
1
https://github.com/tzinfo/tzinfo
1
https://github.com/gazay/gon
1
https://github.com/fnando/svg_optimizer
1
https://github.com/ua-parser/uap-core
1
https://github.com/flori/json
1
https://github.com/ua-parser/uap-ruby
1
https://github.com/ffi/ffi
1
https://github.com/faye/websocket-extensions-ruby
1
https://github.com/faye/faye-websocket-ruby
1
https://github.com/unpoly/unpoly-rails
1
https://github.com/ViewComponent/view_component
1
https://github.com/theforeman/foreman_fog_proxmox
1
https://github.com/exiftool-rb/exiftool_vendored.rb
1
https://github.com/excon/excon
1
https://github.com/evan/ccsv
1
https://github.com/thoughtbot/cocaine
1
https://github.com/jnunemaker/crack
1
https://github.com/jmespath/jmespath.rb
1
https://github.com/jirutka/asciidoctor-include-ext
1
https://github.com/jgarber/redcloth
1
https://github.com/jekyll/jekyll
1
https://github.com/janko/image_processing
1
https://github.com/jamesmartin/inline_svg
1
https://github.com/inukshuk/bibtex-ruby
1
https://github.com/jordansissel/ruby-arr-pm
1
https://github.com/josh/rack-ssl
1
https://github.com/imsebao/404team
1
https://github.com/thoughtbot/clearance
1
https://github.com/igrigorik/em-http-request
1
https://github.com/hopsoft/turbo_boost-commands
1
https://github.com/heartcombo/devise
1
https://github.com/thoughtbot/administrate
1
https://github.com/haml/haml
1
https://github.com/halostatue/minitar
1
https://github.com/Gurpartap/aescrypt
1
https://github.com/tigris/open-uri-cached
1
https://github.com/theforeman/smart_proxy_dynflow
1
https://github.com/GNOME/libxml2
1
https://github.com/TrestleAdmin/trestle-auth
1
https://github.com/binarylogic/authlogic
1
https://github.com/BetterErrors/better_errors
1
https://github.com/beenhero/omniauth-weibo-oauth2
1
https://github.com/bdmac/strong_password
1
https://github.com/bbatsov/rubocop
1
https://github.com/basecamp/marginalia
1
https://github.com/basecamp/easymon
1
https://github.com/aws/aws-sdk-ruby
1
https://github.com/zendesk/samlr
1
https://github.com/auth0/omniauth-auth0
1
https://github.com/asteinhauser/fat_free_crm
1
https://github.com/asciidoctor/asciidoctor
1
https://github.com/ankane/pgsync
1
https://github.com/zenspider/ruby_parser-legacy
1
https://github.com/zvory/csv-safe
1
https://github.com/ankane/clockwork_web
1
https://github.com/ankane/chartkick.js
1
https://gitlab.com/2013/11
1
https://github.com/ankane/blazer
1
https://github.com/amro/gibbon
1
https://github.com/alphagov/tech-docs-gem
1
https://github.com/alexreisner/geocoder
1
https://github.com/AlchemyCMS/alchemy_cms
1
https://github.com/airbrake/airbrake-ruby
1
https://github.com/ahorner/text-helpers
1
https://github.com/affix/CVE-2022-36231
1
https://github.com/adamzaninovich/sounder
1
https://github.com/elastic/logstash
1
https://github.com/elastic/apm-agent-ruby
1
https://github.com/ejschmitt/delayed_job_web
1
https://github.com/dspinhirne/netaddr-rb
1
https://github.com/doorkeeper-gem/doorkeeper-openid_connect
1
https://github.com/voloko/twitter-stream
1
https://github.com/dmendel/bindata
1
https://github.com/discourse/rails_multisite
1
https://github.com/discourse/message_bus
1
https://github.com/denkGroot/Spina
1
https://github.com/dejan/espeak-ruby
1
https://github.com/wconrad/ftpd
1
https://github.com/datamapper/extlib
1
https://github.com/webbynode/webbynode
1
https://github.com/ConradIrwin/em-imap
1
https://github.com/collectiveidea/audited
1
https://github.com/whiteleaf7/narou
1
https://github.com/codders/dataset
1
https://github.com/wycats/handlebars.js
1
https://github.com/chef/mixlib-archive
1
https://github.com/cgriego/active_attr
1
https://github.com/XKCP/XKCP
1
https://github.com/camilova/activerecord-update-by-case
1
https://github.com/bvsatyaram/random_password_generator
1
https://github.com/bundler/bundler
1
https://github.com/ytti/oxidized-web
1
https://github.com/sinatra/rack-protection
1
https://github.com/rf-/keynote
1
https://github.com/restforce/restforce
1
https://github.com/sisimai/rb-sisimai
1
https://github.com/resque/resque-scheduler
1
https://github.com/Smashing/smashing
1
https://github.com/redis-store/redis-store
1
https://github.com/recurly/recurly-client-ruby
1
https://github.com/rdoc/rdoc
1
https://github.com/rcook/rgpg
1
https://github.com/rapid7/metasploit-framework
1
https://github.com/rails/web-console
1
https://github.com/rails/sprockets
1
https://github.com/Snorby/snorby
1
https://github.com/socketry/protocol-http1
1
https://github.com/rails/kredis
1
https://github.com/rails/jquery-rails
1
https://github.com/rails/globalid
1
https://github.com/railsdog/spree
1
https://github.com/railsadminteam/rails_admin
1
https://github.com/rails/activeresource
1