Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
rubygems Security Advisories
Loading...
High
Ecosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: almost 2 years ago
GSA_kwCzR0hTQS14MmZtLTkzd3ctZ2d2eM3pEA
Nokogiri gem, via libxml, is affected by DoS vulnerabilitiesEcosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: minitar, archive-tar-minitar
Source: GitHub Advisory Database
Blast Radius: 30.3
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg1ZzItMzh4OS00Z3Yz
archive-tar-minitar and minitar vulnerable to Path TraversalEcosystems: rubygems
Packages: minitar, archive-tar-minitar
Source: GitHub Advisory Database
Blast Radius: 30.3
Published: over 6 years ago
High
Ecosystems: rubygems
Packages: decidim-meetings, decidim
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: 10 months ago
GSA_kwCzR0hTQS1qbTc5LTlwbTQtdnJ3Oc4AA0m2
Decidim vulnerable to sensitive data disclosureEcosystems: rubygems
Packages: decidim-meetings, decidim
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: 10 months ago
High
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 6.8
Published: almost 2 years ago
GSA_kwCzR0hTQS12cTc0LTk1ODMtaHJtNM4AAgUu
Publify vulnerable to DoS attackEcosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 6.8
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: almost 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTd3angtM2c3ai04NTg0
Possible DoS Vulnerability in Action Controller Token AuthenticationEcosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: almost 3 years ago
High
Ecosystems: rubygems
Packages: openssl
Source: GitHub Advisory Database
Blast Radius: 24.6
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZoODgtcWpwdi1wMzJt
OpenSSL gem for Ruby using inadequate encryption strengthEcosystems: rubygems
Packages: openssl
Source: GitHub Advisory Database
Blast Radius: 24.6
Published: over 6 years ago
High
Ecosystems: rubygems
Packages: doorkeeper
Source: GitHub Advisory Database
Blast Radius: 28.0
Published: almost 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo3dngtOG1xai1jcXA5
Exposure of Sensitive Information to an Unauthorized Actor in DoorkeeperEcosystems: rubygems
Packages: doorkeeper
Source: GitHub Advisory Database
Blast Radius: 28.0
Published: almost 4 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: almost 2 years ago
GSA_kwCzR0hTQS1wN2YyLXJyNDItbTl4bc4AATe8
RubyGems Improper Input Validation vulnerabilityEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: activerecord
Source: GitHub Advisory Database
Blast Radius: 44.7
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXByM3ItNHdycC1yMnB2
ActiveRecord in Ruby on Rails allows database-query bypassEcosystems: rubygems
Packages: activerecord
Source: GitHub Advisory Database
Blast Radius: 44.7
Published: over 6 years ago
High
Ecosystems: rubygems
Packages: json
Source: GitHub Advisory Database
Blast Radius: 43.8
Published: almost 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpwaGctcXdydy03dzln
Unsafe object creation in json RubyGemEcosystems: rubygems
Packages: json
Source: GitHub Advisory Database
Blast Radius: 43.8
Published: almost 4 years ago
High
Ecosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: about 2 years ago
GSA_kwCzR0hTQS02d2o5LTc3d3EtanE3cM1Auw
Nokogiri is vulnerable to XML External Entity (XXE) attackEcosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: about 2 years ago
High
Ecosystems: rubygems
Packages: actionpack, actionview
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhycjQtcDZmcS1oamc3
Directory traversal vulnerability in Action View in Ruby on RailsEcosystems: rubygems
Packages: actionpack, actionview
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: over 6 years ago
High
Ecosystems: rubygems
Packages: openssl
Source: GitHub Advisory Database
Blast Radius: 24.6
Published: almost 2 years ago
GSA_kwCzR0hTQS12NnJwLTNyM3YtaGY0cM4AAU7l
Ruby OpenSSL DoS VulnerabilityEcosystems: rubygems
Packages: openssl
Source: GitHub Advisory Database
Blast Radius: 24.6
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: tmpdir
Source: GitHub Advisory Database
Blast Radius: 9.0
Published: almost 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTQ2ZjItM3Y2My0zeHJw
Tempfile on Windows path traversal vulnerabilityEcosystems: rubygems
Packages: tmpdir
Source: GitHub Advisory Database
Blast Radius: 9.0
Published: almost 3 years ago
High
Ecosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: about 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1NTMtanI5OC12eDQ3
libxml as used in Nokogiri has an infinite loop in a certain end-of-file situationEcosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: about 4 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: almost 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZyMzItZ3I1Yy14cTVj
RubyGems Escape sequence injection vulnerability in verboseEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: almost 5 years ago
High
Ecosystems: rubygems
Packages: tzinfo
Source: GitHub Advisory Database
Blast Radius: 46.0
Published: almost 2 years ago
GSA_kwCzR0hTQS01Y20yLTloOGMtcnZmeM4AAtkK
TZInfo relative path traversal vulnerability allows loading of arbitrary filesEcosystems: rubygems
Packages: tzinfo
Source: GitHub Advisory Database
Blast Radius: 46.0
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: webrick
Source: GitHub Advisory Database
Blast Radius: 35.0
Published: almost 2 years ago
GSA_kwCzR0hTQS1nd2ZnLWNxbWctY2Y4Zs4AAmJ3
WEBRick vulnerable to HTTP Request/Response SmugglingEcosystems: rubygems
Packages: webrick
Source: GitHub Advisory Database
Blast Radius: 35.0
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: asciidoctor
Source: GitHub Advisory Database
Blast Radius: 28.6
Published: almost 2 years ago
GSA_kwCzR0hTQS1xYzlwLW1qeG0tajJ3as4AASwT
Asciidoctor Infinite Loop vulnerabilityEcosystems: rubygems
Packages: asciidoctor
Source: GitHub Advisory Database
Blast Radius: 28.6
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: almost 2 years ago
GSA_kwCzR0hTQS1jZjQ2LTZ4eGgtcGM3Nc4AAhJV
libxslt Type Confusion vulnerability that affects NokogiriEcosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: almost 2 years ago
GSA_kwCzR0hTQS0yNDJ4LTdjbTYtNHc4as4AAid7
Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerabilityEcosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: sidekiq
Source: GitHub Advisory Database
Blast Radius: 33.0
Published: over 2 years ago
GSA_kwCzR0hTQS1qcmZqLTk4cWctcWpnds0lug
Denial of service in sidekiqEcosystems: rubygems
Packages: sidekiq
Source: GitHub Advisory Database
Blast Radius: 33.0
Published: over 2 years ago
High
Ecosystems: rubygems, pypi, maven
Packages: grpc, grpcio, io.grpc:grpc-protobuf
Source: GitHub Advisory Database
Blast Radius: 89.7
Published: 10 months ago
GSA_kwCzR0hTQS02NjI4LXE2ajktdzh2Z84AA0dX
gRPC Reachable Assertion issueEcosystems: rubygems, pypi, maven
Packages: grpc, grpcio, io.grpc:grpc-protobuf
Source: GitHub Advisory Database
Blast Radius: 89.7
Published: 10 months ago
High
Ecosystems: rubygems
Packages: sinatra
Source: GitHub Advisory Database
Blast Radius: 38.7
Published: almost 2 years ago
GSA_kwCzR0hTQS1xcDQ5LTNwdncteDRtNc3XwA
sinatra does not validate expanded path matchesEcosystems: rubygems
Packages: sinatra
Source: GitHub Advisory Database
Blast Radius: 38.7
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: almost 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1oMzctOGMzZy0zZmdj
RubyGems Escape sequence injection vulnerability in gem ownerEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: almost 5 years ago
High
Ecosystems: rubygems
Packages: mixlib-archive
Source: GitHub Advisory Database
Blast Radius: 23.1
Published: almost 2 years ago
GSA_kwCzR0hTQS05OHd4LWN3ODYtYzk3eM3xGg
mixlib-archive Path Traversal vulnerabilityEcosystems: rubygems
Packages: mixlib-archive
Source: GitHub Advisory Database
Blast Radius: 23.1
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: about 2 years ago
GSA_kwCzR0hTQS1qYzM2LTQyY2YtdnF3as018g
Nokogiri affected by zlib's Out-of-bounds Write vulnerabilityEcosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: about 2 years ago
High
Ecosystems: rubygems
Packages: samlr
Source: GitHub Advisory Database
Blast Radius: 2.3
Published: over 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFweHAtNWo1Ni1nZzN4
samlr XML nodes comment attackEcosystems: rubygems
Packages: samlr
Source: GitHub Advisory Database
Blast Radius: 2.3
Published: over 4 years ago
High
Ecosystems: pypi, rubygems
Packages: pyarrow, red-arrow
Source: GitHub Advisory Database
Blast Radius: 49.0
Published: almost 2 years ago
GSA_kwCzR0hTQS1janc0LTJ3OXItcjhtds4AAinR
Missing Initialization of Resource in Apache ArrowEcosystems: pypi, rubygems
Packages: pyarrow, red-arrow
Source: GitHub Advisory Database
Blast Radius: 49.0
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: activerecord
Source: GitHub Advisory Database
Blast Radius: 44.7
Published: over 1 year ago
GSA_kwCzR0hTQS01Nzl3LTIyajQtNDc0Oc4AAxDw
Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapterEcosystems: rubygems
Packages: activerecord
Source: GitHub Advisory Database
Blast Radius: 44.7
Published: over 1 year ago
High
Ecosystems: rubygems
Packages: actionview
Source: GitHub Advisory Database
Blast Radius: 43.3
Published: about 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW02M2otd2g1dy1jMjUy
Denial of Service Vulnerability in Action ViewEcosystems: rubygems
Packages: actionview
Source: GitHub Advisory Database
Blast Radius: 43.3
Published: about 5 years ago
High
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: almost 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc4d3ctNDZ4Mi0ycDY1
Denial of Service in Action DispatchEcosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: almost 3 years ago
High
Ecosystems: rubygems
Packages: rack
Source: GitHub Advisory Database
Blast Radius: 45.1
Published: over 1 year ago
GSA_kwCzR0hTQS02NWY1LW1mcGYtdmZoas4AAxDt
Denial of service via header parsing in RackEcosystems: rubygems
Packages: rack
Source: GitHub Advisory Database
Blast Radius: 45.1
Published: over 1 year ago
High
Ecosystems: rubygems
Packages: reel
Source: GitHub Advisory Database
Blast Radius: 17.7
Published: almost 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXgzdjQtcHh2bS02M2o4
HTTP Request Smuggling in reelEcosystems: rubygems
Packages: reel
Source: GitHub Advisory Database
Blast Radius: 17.7
Published: almost 3 years ago
High
Ecosystems: rubygems
Packages: i18n
Source: GitHub Advisory Database
Blast Radius: 46.1
Published: almost 2 years ago
GSA_kwCzR0hTQS0zNGhmLWc3NDQtanc2NM4AAUk-
i18n Vulnerable to Denial of Service AttackEcosystems: rubygems
Packages: i18n
Source: GitHub Advisory Database
Blast Radius: 46.1
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: over 2 years ago
GSA_kwCzR0hTQS0ycnI1LThxMzctMnc3aM0V_Q
Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRubyEcosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: over 2 years ago
High
Ecosystems: rubygems
Packages: ruby-saml
Source: GitHub Advisory Database
Blast Radius: 25.2
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM2cDcteGp3OC1oNmYy
Ruby-saml allows attackers to perform XML signature wrapping attacksEcosystems: rubygems
Packages: ruby-saml
Source: GitHub Advisory Database
Blast Radius: 25.2
Published: over 5 years ago
High
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: almost 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg3MjctbTZnai1tYzM3
Possible Strong Parameters Bypass in ActionPackEcosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: almost 4 years ago
High
Ecosystems: rubygems
Packages: activestorage
Source: GitHub Advisory Database
Blast Radius: 41.0
Published: almost 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW00MngtMzdwMy1mdjV3
Circumvention of file size limits in ActiveStorageEcosystems: rubygems
Packages: activestorage
Source: GitHub Advisory Database
Blast Radius: 41.0
Published: almost 4 years ago
High
Ecosystems: rubygems
Packages: activeresource
Source: GitHub Advisory Database
Blast Radius: 39.4
Published: almost 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTQ2ajIteGpncC1qcmZt
Information disclosure issue in Active ResourceEcosystems: rubygems
Packages: activeresource
Source: GitHub Advisory Database
Blast Radius: 39.4
Published: almost 4 years ago
High
Ecosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdocDIteHdwai05NWpx
Denial of service or RCE from libxml2 and libxsltEcosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: over 5 years ago
High
Ecosystems: rubygems
Packages: pgsync
Source: GitHub Advisory Database
Blast Radius: 20.7
Published: about 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTcycmotMzZxYy00N2c3
Pgsync Contains Cleartext Transmission of Sensitive InformationEcosystems: rubygems
Packages: pgsync
Source: GitHub Advisory Database
Blast Radius: 20.7
Published: about 3 years ago
High
Ecosystems: rubygems
Packages: uri
Source: GitHub Advisory Database
Blast Radius: 23.0
Published: about 1 year ago
GSA_kwCzR0hTQS1odjVqLTNoOWYtOTljMs4AAyes
Ruby URI component ReDoS issueEcosystems: rubygems
Packages: uri
Source: GitHub Advisory Database
Blast Radius: 23.0
Published: about 1 year ago
High
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 27.8
Published: almost 2 years ago
GSA_kwCzR0hTQS1neDY5LTZjcDQtaHhyas38Wg
RubyGems Link Following vulnerabilityEcosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 27.8
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 6.8
Published: about 2 years ago
GSA_kwCzR0hTQS14M3JxLXIzY20tNXZjNM0psw
Publify Business Logic ErrorsEcosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 6.8
Published: about 2 years ago
High
Ecosystems: rubygems
Packages: solidus_core
Source: GitHub Advisory Database
Blast Radius: 20.8
Published: over 2 years ago
GSA_kwCzR0hTQS1xeG1yLXF4aDYtMmNjOc0ZdQ
ReDos vulnerability on guest checkout email validationEcosystems: rubygems
Packages: solidus_core
Source: GitHub Advisory Database
Blast Radius: 20.8
Published: over 2 years ago
High
Ecosystems: rubygems
Packages: blazer
Source: GitHub Advisory Database
Blast Radius: 18.8
Published: about 2 years ago
GSA_kwCzR0hTQS1xZjlxLXE0aGgtcXBoM80-qA
SQL injection in blazerEcosystems: rubygems
Packages: blazer
Source: GitHub Advisory Database
Blast Radius: 18.8
Published: about 2 years ago
High
Ecosystems: rubygems
Packages: yard
Source: GitHub Advisory Database
Blast Radius: 35.6
Published: almost 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhmaGgtcng1Ni1yeGNy
Path Traversal vulnerability that affects yardEcosystems: rubygems
Packages: yard
Source: GitHub Advisory Database
Blast Radius: 35.6
Published: almost 5 years ago
High
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 27.8
Published: almost 2 years ago
GSA_kwCzR0hTQS03NHB2LXY5Z2gtaDI1cM4AASkU
RubyGems Infinite Loop vulnerabilityEcosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 27.8
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: pghero
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: over 1 year ago
GSA_kwCzR0hTQS12Zjk5LXh3MjYtODZnNc4AAwwE
PgHero Allows Information Disclosure Through EXPLAIN FeatureEcosystems: rubygems
Packages: pghero
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: over 1 year ago
High
Ecosystems: rubygems
Packages: puma
Source: GitHub Advisory Database
Blast Radius: 42.1
Published: almost 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEyOG0tOHhqdy04dnI1
Puma's Keepalive Connections Causing Denial Of ServiceEcosystems: rubygems
Packages: puma
Source: GitHub Advisory Database
Blast Radius: 42.1
Published: almost 3 years ago
High
Ecosystems: rubygems
Packages: rack
Source: GitHub Advisory Database
Blast Radius: 45.1
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhnNzgtNGY2eC05OXdx
Rack vulnerable to Denial of ServiceEcosystems: rubygems
Packages: rack
Source: GitHub Advisory Database
Blast Radius: 45.1
Published: over 5 years ago
High
Ecosystems: rubygems
Packages: sanitize
Source: GitHub Advisory Database
Blast Radius: 30.2
Published: about 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdmNDItcDg0ai1mNThw
Sanitize vulnerable to Improper Input Validation and Cross-site ScriptingEcosystems: rubygems
Packages: sanitize
Source: GitHub Advisory Database
Blast Radius: 30.2
Published: about 6 years ago
High
Ecosystems: maven, rubygems
Packages: com.google.protobuf:protobuf-kotlin, com.google.protobuf:protobuf-java, google-protobuf
Source: GitHub Advisory Database
Blast Radius: 61.8
Published: over 2 years ago
GSA_kwCzR0hTQS13cnZ3LWhnMjItNG02N80hQw
A potential Denial of Service issue in protobuf-javaEcosystems: maven, rubygems
Packages: com.google.protobuf:protobuf-kotlin, com.google.protobuf:protobuf-java, google-protobuf
Source: GitHub Advisory Database
Blast Radius: 61.8
Published: over 2 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: almost 2 years ago
GSA_kwCzR0hTQS1wbTl4LTQzOTItMmMycM4AARmv
RubyGems may allow a maliciously crafted gem to overwrite filesEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: almost 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3bTgtZmp2Ny1qNzc0
RubyGems Escape sequence injection in errorsEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: almost 5 years ago
High
Ecosystems: rubygems
Packages: rack
Source: GitHub Advisory Database
Blast Radius: 45.1
Published: almost 2 years ago
GSA_kwCzR0hTQS1oeHF4LXh3dmgtNDRtMs4AArQW
Denial of Service Vulnerability in Rack Multipart ParsingEcosystems: rubygems
Packages: rack
Source: GitHub Advisory Database
Blast Radius: 45.1
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: almost 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNoNHItcGp2Ni1jcGg5
RubyGems Escape sequence injection vulnerability in api response handlingEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: almost 5 years ago
High
Ecosystems: rubygems
Packages: puma
Source: GitHub Advisory Database
Blast Radius: 42.1
Published: almost 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXg3amctNnB3Zy1meDVo
HTTP Smuggling via Transfer-Encoding Header in PumaEcosystems: rubygems
Packages: puma
Source: GitHub Advisory Database
Blast Radius: 42.1
Published: almost 4 years ago
High
Ecosystems: rubygems
Packages: time
Source: GitHub Advisory Database
Blast Radius: 20.7
Published: about 1 year ago
GSA_kwCzR0hTQS1mZzd4LWc4MnItOTRxY84AAyet
Ruby Time component ReDoS issueEcosystems: rubygems
Packages: time
Source: GitHub Advisory Database
Blast Radius: 20.7
Published: about 1 year ago
High
Ecosystems: rubygems
Packages: aescrypt
Source: GitHub Advisory Database
Blast Radius: 15.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTRjNHctM3E0NS1ocDlq
Aescrypt does not sufficiently use random valuesEcosystems: rubygems
Packages: aescrypt
Source: GitHub Advisory Database
Blast Radius: 15.0
Published: over 6 years ago
High
Ecosystems: pypi, rubygems
Packages: pyarrow, red-arrow
Source: GitHub Advisory Database
Blast Radius: 49.0
Published: almost 2 years ago
GSA_kwCzR0hTQS04Y3cyLWp2NWMtYzgyNc4AAina
Missing Initialization of Resource in Apache ArrowEcosystems: pypi, rubygems
Packages: pyarrow, red-arrow
Source: GitHub Advisory Database
Blast Radius: 49.0
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThjNTYtY3Btdy04OXg3
Out-of-bounds read in nokogiriEcosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: over 6 years ago
High
Ecosystems: rubygems
Packages: encoded_id-rails
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: 6 months ago
GSA_kwCzR0hTQS0zcHg3LWptMnAtNmgyY84AA2oN
encoded_id-rails potential DOS vulnerability due to URIs with extremely long encoded IDsEcosystems: rubygems
Packages: encoded_id-rails
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: 6 months ago
High
Ecosystems: rubygems
Packages: devise
Source: GitHub Advisory Database
Blast Radius: 40.2
Published: over 1 year ago
GSA_kwCzR0hTQS03NDZnLTNnZnAtaGZod84AAxNH
Devise Gem for Ruby Unauthorized Access Using "Remember Me" CookieEcosystems: rubygems
Packages: devise
Source: GitHub Advisory Database
Blast Radius: 40.2
Published: over 1 year ago
High
Ecosystems: rubygems
Packages: rswag
Source: GitHub Advisory Database
Blast Radius: 20.9
Published: 10 months ago
GSA_kwCzR0hTQS12Yzc5LTY1cHItcTgyds4AA0uC
rswag vulnerable to arbitrary JSON and YAML file read via directory traversalEcosystems: rubygems
Packages: rswag
Source: GitHub Advisory Database
Blast Radius: 20.9
Published: 10 months ago
High
Ecosystems: rubygems
Packages: yard
Source: GitHub Advisory Database
Blast Radius: 35.6
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdqNHAtM3doMy0ycm1m
Arbitrary file read vulnerability in yard serverEcosystems: rubygems
Packages: yard
Source: GitHub Advisory Database
Blast Radius: 35.6
Published: over 6 years ago
High
Ecosystems: rubygems
Packages: jekyll
Source: GitHub Advisory Database
Blast Radius: 42.7
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR4amgtbTNxeC00OXdj
Jekyll allows attackers to access arbitrary files by specifying a symlinkEcosystems: rubygems
Packages: jekyll
Source: GitHub Advisory Database
Blast Radius: 42.7
Published: over 5 years ago
High
Ecosystems: rubygems
Packages: ox
Source: GitHub Advisory Database
Blast Radius: 23.1
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXBqajQtdzM5Zy1wdzU0
Ox gem crashes due to a crafted inputEcosystems: rubygems
Packages: ox
Source: GitHub Advisory Database
Blast Radius: 23.1
Published: over 6 years ago
High
Ecosystems: rubygems
Packages: addressable
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: almost 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWp4aGMtcTg1Ny0zajZn
Regular Expression Denial of Service in Addressable templatesEcosystems: rubygems
Packages: addressable
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: almost 3 years ago
High
Ecosystems: rubygems
Packages: jruby-openssl
Source: GitHub Advisory Database
Blast Radius: 30.3
Published: over 1 year ago
GSA_kwCzR0hTQS14Z3Y3LXBxcWgtaDJ3Oc4AAxEu
jruby-openssl gem for JRuby fails to do proper certificate validationEcosystems: rubygems
Packages: jruby-openssl
Source: GitHub Advisory Database
Blast Radius: 30.3
Published: over 1 year ago
High
Ecosystems: rubygems
Packages: loofah
Source: GitHub Advisory Database
Blast Radius: 42.9
Published: over 1 year ago
GSA_kwCzR0hTQS00ODZmLWhqajktOXZoaM4AAwSc
Inefficient Regular Expression Complexity in LoofahEcosystems: rubygems
Packages: loofah
Source: GitHub Advisory Database
Blast Radius: 42.9
Published: over 1 year ago
High
Ecosystems: rubygems
Packages: active_attr
Source: GitHub Advisory Database
Blast Radius: 23.5
Published: over 1 year ago
GSA_kwCzR0hTQS00d2hmLXJteDUtOGZyds4AAwZi
active_attr Improper Resource Shutdown or Release vulnerabilityEcosystems: rubygems
Packages: active_attr
Source: GitHub Advisory Database
Blast Radius: 23.5
Published: over 1 year ago
High
Ecosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: over 1 year ago
GSA_kwCzR0hTQS1xdjRxLW1yNXItcXByas4AAwNH
Unchecked return value from xmlTextReaderExpandEcosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: over 1 year ago
High
Ecosystems: rubygems
Packages: rails-html-sanitizer
Source: GitHub Advisory Database
Blast Radius: 42.9
Published: over 1 year ago
GSA_kwCzR0hTQS01eDc5LXc4MmYtZ3c4d84AAwSf
Inefficient Regular Expression Complexity in rails-html-sanitizerEcosystems: rubygems
Packages: rails-html-sanitizer
Source: GitHub Advisory Database
Blast Radius: 42.9
Published: over 1 year ago
High
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: almost 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhqZzQtOHE1Zi14NmZt
Action Pack contains Information Disclosure / Unintended Method Execution vulnerabilityEcosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: almost 3 years ago
High
Ecosystems: rubygems
Packages: activejob
Source: GitHub Advisory Database
Blast Radius: 42.8
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEycXctcm1yaC12djQy
Improper Access Control in activejobEcosystems: rubygems
Packages: activejob
Source: GitHub Advisory Database
Blast Radius: 42.8
Published: over 5 years ago
High
Ecosystems: rubygems
Packages: bson
Source: GitHub Advisory Database
Blast Radius: 32.2
Published: about 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFoNHctN3B3My1wNHJw
BSON rubygem contains potential denial of serviceEcosystems: rubygems
Packages: bson
Source: GitHub Advisory Database
Blast Radius: 32.2
Published: about 4 years ago
High
Ecosystems: rubygems
Packages: cgi
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: over 2 years ago
GSA_kwCzR0hTQS00dmY0LXFtdmctbWg3aM0gHQ
Cookie Prefix Spoofing in CGI::Cookie.parseEcosystems: rubygems
Packages: cgi
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: over 2 years ago
High
Ecosystems: rubygems
Packages: doorkeeper
Source: GitHub Advisory Database
Blast Radius: 28.0
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY5NG0tamhyOS1wZjc3
Doorkeeper subject to Incorrect Permission AssignmentEcosystems: rubygems
Packages: doorkeeper
Source: GitHub Advisory Database
Blast Radius: 28.0
Published: over 5 years ago
High
Ecosystems: rubygems
Packages: yajl-ruby
Source: GitHub Advisory Database
Blast Radius: 34.9
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd3aDctNGp3OS0zM3g2
yajl-ruby gem Denial of Service vulnerabilityEcosystems: rubygems
Packages: yajl-ruby
Source: GitHub Advisory Database
Blast Radius: 34.9
Published: over 6 years ago
High
Ecosystems: rubygems
Packages: sprockets
Source: GitHub Advisory Database
Blast Radius: 44.5
Published: almost 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXByM2gtampoai01NzN4
Sprockets path traversal leads to information leakEcosystems: rubygems
Packages: sprockets
Source: GitHub Advisory Database
Blast Radius: 44.5
Published: almost 6 years ago
High
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZmcHYtYzRobS0zeDZ2
actionpack is vulnerable to denial of service via a crafted HTTP Accept headerEcosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: over 6 years ago
High
Ecosystems: rubygems
Packages: rexml
Source: GitHub Advisory Database
Blast Radius: 40.7
Published: almost 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThjcjgtNHZmdy1tcjdo
REXML round-trip instabilityEcosystems: rubygems
Packages: rexml
Source: GitHub Advisory Database
Blast Radius: 40.7
Published: almost 3 years ago
High
Ecosystems: rubygems
Packages: chloride
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: about 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU3M3gtamhxaC1qZzM2
Improper Certificate Validation in chlorideEcosystems: rubygems
Packages: chloride
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: about 5 years ago
High
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTloNmctZ3A5NS14M3E1
actionpack is vulnerable to denial of service because of a wildcard controller routeEcosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 44.6
Published: over 6 years ago
High
Ecosystems: rubygems
Packages: json-jwt
Source: GitHub Advisory Database
Blast Radius: 24.5
Published: over 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNmZjctNmg0cS1xNXBq
JSON-jwt Gem lacked element count during splitting of JWE stringEcosystems: rubygems
Packages: json-jwt
Source: GitHub Advisory Database
Blast Radius: 24.5
Published: over 4 years ago
High
Ecosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: about 2 years ago
GSA_kwCzR0hTQS12NmdwLTltbW0tYzZwNc054w
Out-of-bounds Write in zlib affects NokogiriEcosystems: rubygems
Packages: nokogiri
Source: GitHub Advisory Database
Blast Radius: 45.3
Published: about 2 years ago
High
Ecosystems: rubygems
Packages: logstash-core
Source: GitHub Advisory Database
Blast Radius: 22.7
Published: almost 2 years ago
GSA_kwCzR0hTQS12Y21tLXBwcXgtOTVjaM4AATXo
Logstash Logs Sensitive InformationEcosystems: rubygems
Packages: logstash-core
Source: GitHub Advisory Database
Blast Radius: 22.7
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: mechanize
Source: GitHub Advisory Database
Blast Radius: 29.4
Published: about 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFycW0tZnB2Ni02cjhn
Command Injection Vulnerability in MechanizeEcosystems: rubygems
Packages: mechanize
Source: GitHub Advisory Database
Blast Radius: 29.4
Published: about 3 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: almost 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV4MzItYzltZi00OWNj
RubyGems Delete directory using symlink when decompressing tarEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: almost 5 years ago
High
Ecosystems: rubygems
Packages: elastic-apm
Source: GitHub Advisory Database
Blast Radius: 15.3
Published: almost 2 years ago
GSA_kwCzR0hTQS0zNWoyLXA4ZmgteDk2Ns4AAhfV
Elastic APM agent for Ruby vulnerable to Improper Certificate ValidationEcosystems: rubygems
Packages: elastic-apm
Source: GitHub Advisory Database
Blast Radius: 15.3
Published: almost 2 years ago
High
Ecosystems: rubygems
Packages: em-imap
Source: GitHub Advisory Database
Blast Radius: 5.8
Published: almost 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTRmNjgtNDlxcS1oMzky
Improper certificate validation in em-imapEcosystems: rubygems
Packages: em-imap
Source: GitHub Advisory Database
Blast Radius: 5.8
Published: almost 3 years ago
High
Ecosystems: rubygems
Packages: oauth
Source: GitHub Advisory Database
Blast Radius: 33.5
Published: about 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTczNTktM2M2ci1oZmMy
Improper Certificate Validation in oauth ruby gemEcosystems: rubygems
Packages: oauth
Source: GitHub Advisory Database
Blast Radius: 33.5
Published: about 3 years ago
High
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 44.0
Published: about 2 years ago
GSA_kwCzR0hTQS13aDk4LXAyOHItdnJjOc0rDg
Exposure of information in Action PackEcosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 44.0
Published: about 2 years ago
High
Ecosystems: rubygems
Packages: em-http-request
Source: GitHub Advisory Database
Blast Radius: 29.2
Published: almost 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEyN2YtdjNyNi05djc3
Improper Certificate Validation in EM-HTTP-RequestEcosystems: rubygems
Packages: em-http-request
Source: GitHub Advisory Database
Blast Radius: 29.2
Published: almost 3 years ago
High
Ecosystems: rubygems
Packages: spree
Source: GitHub Advisory Database
Blast Radius: 25.2
Published: over 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY4Y20tMzY0Zi1xOXFo
Ensure that doorkeeper_token is valid when authenticating requests in API v2 callsEcosystems: rubygems
Packages: spree
Source: GitHub Advisory Database
Blast Radius: 25.2
Published: over 3 years ago
High
Ecosystems: rubygems
Packages: omniauth-auth0
Source: GitHub Advisory Database
Blast Radius: 22.7
Published: over 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU4cjQtaDZ2OC1qY3Zt
Regression in JWT Signature ValidationEcosystems: rubygems
Packages: omniauth-auth0
Source: GitHub Advisory Database
Blast Radius: 22.7
Published: over 3 years ago
High
Ecosystems: rubygems, pypi, maven
Packages: grpc, grpcio, io.grpc:grpc-protobuf
Source: GitHub Advisory Database
Blast Radius: 88.5
Published: 10 months ago
GSA_kwCzR0hTQS1jZmdwLTI5NzctMmZtbc4AA0N9
Connection confusion in gRPCEcosystems: rubygems, pypi, maven
Packages: grpc, grpcio, io.grpc:grpc-protobuf
Source: GitHub Advisory Database
Blast Radius: 88.5
Published: 10 months ago
High
Ecosystems: rubygems
Packages: carrierwave
Source: GitHub Advisory Database
Blast Radius: 35.7
Published: about 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNmM3ctZzg2aC0zNXg0
Code Injection vulnerability in CarrierWave::RMagickEcosystems: rubygems
Packages: carrierwave
Source: GitHub Advisory Database
Blast Radius: 35.7
Published: about 3 years ago
Statistics
Advisories: 18,235
Packages: 8,259
Repositories: 285
Ecosystems: 12
Packages: 8,259
Repositories: 285
Ecosystems: 12
Filter by Severity
Filter by Ecosystem
Filter by Package
actionpack
57
nokogiri
42
rubygems-update
25
puppet
23
rack
22
activerecord
21
activesupport
14
publify_core
14
passenger
13
actionview
12
rails
11
puma
11
jquery-rails
10
fat_free_crm
10
jquery
9
rails-html-sanitizer
9
org.webjars.npm:jquery
9
jQuery
8
decidim
7
jquery-ui
7
org.jruby:jruby-stdlib
7
jQuery.UI.Combined
7
org.webjars.npm:jquery-ui
7
jquery-ui-rails
7
ember-source
6
loofah
6
camaleon_cms
6
doorkeeper
6
katello
6
spree
5
commonmarker
5
spree_auth_devise
5
bundler
5
sidekiq
5
avo
4
sanitize
4
carrierwave
4
grpcio
4
grpc
4
webrick
4
sinatra
4
dragonfly
4
activestorage
4
mail
4
devise
4
fluentd
4
private_address_check
3
rdoc
3
rails_admin
3
rack-cors
3
resque
3
cgi
3
decidim-core
3
io.grpc:grpc-protobuf
3
yard
3
rest-client
3
omniauth
3
bootstrap
3
bootstrap
3
git
3
json-jwt
3
ruby-saml
3
rubyzip
3
gollum
3
geminabox
3
openssl
3
chartkick
3
pageflow
2
omniauth-facebook
2
facter
2
logstash-core
2
redcarpet
2
pdfkit
2
git-fastclone
2
paperclip
2
mini_magick
2
twitter-bootstrap-rails
2
ox
2
net-ldap
2
devise-two-factor
2
httparty
2
json
2
bson
2
yajl-ruby
2
safemode
2
ruby-openid
2
bootstrap-sass
2
mapbox-rails
2
mapbox.js
2
secure_headers
2
sprockets
2
phlex
2
faye
2
sup
2
echor
2
uri
2
field_test
2
i18n
2
kramdown
2
spina
2
view_component
2
VladTheEnterprising
2
solidus_frontend
2
radiant
2
cocoapods-downloader
2
pyarrow
2
red-arrow
2
activeadmin
2
google-protobuf
2
com.google.protobuf:protobuf-kotlin
2
com.google.protobuf:protobuf-java
2
qiita-markdown
2
decidim-templates
2
pghero
2
user_agent_parser
2
mechanize
2
administrate
2
solidus_core
2
blazer
1
solidus_auth_devise
1
kaminari
1
rmagick
1
solidus_backend
1
github.com/github/hub
1
hub
1
websocket-extensions
1
railties
1
foreman_ansible
1
gitlab-grit
1
geokit-rails
1
multi_xml
1
keynote
1
twitter-stream
1
pysha3
1
sha3
1
cap-strap
1
ruby-jss
1
rack-mini-profiler
1
hiera
1
mcollective-client
1
wicked
1
actionmailer
1
kelredd-pruview
1
sqlite3-ruby
1
thin
1
matestack-ui-core
1
restforce
1
ruby_parser
1
better_errors
1
mongrel
1
unpoly-rails
1
bindata
1
oxidized-web
1
github.com/pubnub/swift
1
pubnub
1
pubnub
1
pubnub/pubnub
1
pubnub
1
pubnub
1
Pubnub
1
github.com/pubnub/go/v5
1
github.com/pubnub/go/v6
1
github.com/pubnub/go
1
github.com/pubnub/go/v7
1
com.pubnub:pubnub
1
rubocop
1
ruby-mysql
1
gtk2
1
rotp
1
@turbo-boost/commands
1
turbo_boost-commands
1
stringio
1
discordrb
1
diffy
1
recurly
1
md2pdf
1
sounder
1
date
1
octopoller
1
paratrooper-newrelic
1
jmespath
1
trilogy
1
sentry-raven
1
devise_invitable
1
ftpd
1
tweetstream
1
flash_tool
1
lean-ruport
1
openshift-origin-node
1
point-cli
1
govuk_tech_docs
1
audited
1
omniauth-apple
1
spree_api
1
omniauth-auth0
1
shrine
1
message_bus
1
inline_svg
1
pdf_info
1
rswag
1
Filter by Repository
https://github.com/rails/rails
53
https://github.com/sparklemotion/nokogiri
31
https://github.com/rubygems/rubygems
18
https://github.com/rack/rack
17
https://github.com/puppetlabs/puppet
15
https://github.com/publify/publify
13
https://github.com/puma/puma
11
https://github.com/phusion/passenger
10
https://github.com/jquery/jquery
10
https://github.com/fatfreecrm/fat_free_crm
9
https://github.com/rails/rails-html-sanitizer
9
https://github.com/decidim/decidim
8
https://github.com/jquery/jquery-ui
6
https://github.com/doorkeeper-gem/doorkeeper
6
https://github.com/flavorjones/loofah
6
https://github.com/solidusio/solidus_auth_devise
5
https://github.com/solidusio/solidus
5
https://github.com/owen2345/camaleon-cms
4
https://github.com/mikel/mail
4
https://github.com/grpc/grpc
4
https://github.com/markevans/dragonfly
4
https://github.com/Katello/katello
4
https://github.com/fluent/fluentd
4
https://github.com/sinatra/sinatra
4
https://github.com/rgrove/sanitize
4
https://github.com/carrierwaveuploader/carrierwave
4
https://github.com/avo-hq/avo
4
https://github.com/ruby/openssl
4
https://github.com/resque/resque
3
https://github.com/rest-client/rest-client
3
https://github.com/sidekiq/sidekiq
3
https://github.com/rubygems/rubygems.org
3
https://github.com/ruby-git/ruby-git
3
https://github.com/spree/spree
3
https://github.com/rubyzip/rubyzip
3
https://github.com/geminabox/geminabox
3
https://github.com/cyu/rack-cors
3
https://github.com/twbs/bootstrap
3
https://github.com/gjtorikian/commonmarker
3
https://github.com/gollum/gollum
3
https://github.com/lsegal/yard
3
https://github.com/jtdowney/private_address_check
3
https://github.com/faye/faye
2
https://github.com/emberjs/ember.js
2
https://github.com/codevise/pageflow
2
https://github.com/CocoaPods/cocoapods-downloader
2
https://github.com/brianmario/yajl-ruby
2
https://github.com/ankane/pghero
2
https://github.com/ankane/field_test
2
https://github.com/ruby-ldap/ruby-net-ldap
2
https://github.com/ankane/chartkick
2
https://github.com/ruby/rdoc
2
https://github.com/ruby/uri
2
https://github.com/ruby/webrick
2
https://github.com/activeadmin/activeadmin
2
https://github.com/gettalong/kramdown
2
https://github.com/github/cmark-gfm
2
https://github.com/increments/qiita-markdown
2
https://github.com/jnunemaker/httparty
2
https://github.com/protocolbuffers/protobuf
2
https://github.com/plataformatec/devise
2
https://github.com/mongodb/bson-ruby
2
https://github.com/phlex-ruby/phlex
2
https://github.com/mperham/sidekiq
2
https://github.com/openid/ruby-openid
2
https://github.com/omniauth/omniauth
2
https://github.com/ohler55/ox
2
https://github.com/nov/json-jwt
2
https://github.com/vmg/redcarpet
2
https://github.com/sparklemotion/mechanize
2
https://github.com/twitter/secure_headers
2
https://github.com/square/git-fastclone
2
https://github.com/tinfoil/devise-two-factor
2
https://github.com/sup-heliotrope/sup
2
https://github.com/svenfuchs/i18n
2
https://github.com/svenfuchs/safemode
2
https://github.com/thoughtbot/paperclip
2
https://gitlab.com/gitlab-org/cves
2
https://github.com/github/view_component
1
https://github.com/github/trilogy
1
https://github.com/github/hub
1
https://github.com/twbs/bootstrap-sass
1
https://github.com/kaminari/kaminari
1
https://github.com/theforeman/ldap_fluff
1
https://github.com/getsentry/raven-ruby
1
https://github.com/geokit/geokit-rails
1
https://github.com/tzinfo/tzinfo
1
https://github.com/gazay/gon
1
https://github.com/fnando/svg_optimizer
1
https://github.com/ua-parser/uap-core
1
https://github.com/flori/json
1
https://github.com/ua-parser/uap-ruby
1
https://github.com/ffi/ffi
1
https://github.com/faye/websocket-extensions-ruby
1
https://github.com/faye/faye-websocket-ruby
1
https://github.com/unpoly/unpoly-rails
1
https://github.com/ViewComponent/view_component
1
https://github.com/theforeman/foreman_fog_proxmox
1
https://github.com/exiftool-rb/exiftool_vendored.rb
1
https://github.com/excon/excon
1
https://github.com/evan/ccsv
1
https://github.com/thoughtbot/cocaine
1
https://github.com/jnunemaker/crack
1
https://github.com/jmespath/jmespath.rb
1
https://github.com/jirutka/asciidoctor-include-ext
1
https://github.com/jgarber/redcloth
1
https://github.com/jekyll/jekyll
1
https://github.com/janko/image_processing
1
https://github.com/jamesmartin/inline_svg
1
https://github.com/inukshuk/bibtex-ruby
1
https://github.com/jordansissel/ruby-arr-pm
1
https://github.com/josh/rack-ssl
1
https://github.com/imsebao/404team
1
https://github.com/thoughtbot/clearance
1
https://github.com/igrigorik/em-http-request
1
https://github.com/hopsoft/turbo_boost-commands
1
https://github.com/heartcombo/devise
1
https://github.com/thoughtbot/administrate
1
https://github.com/haml/haml
1
https://github.com/halostatue/minitar
1
https://github.com/Gurpartap/aescrypt
1
https://github.com/tigris/open-uri-cached
1
https://github.com/theforeman/smart_proxy_dynflow
1
https://github.com/GNOME/libxml2
1
https://github.com/TrestleAdmin/trestle-auth
1
https://github.com/binarylogic/authlogic
1
https://github.com/BetterErrors/better_errors
1
https://github.com/beenhero/omniauth-weibo-oauth2
1
https://github.com/bdmac/strong_password
1
https://github.com/bbatsov/rubocop
1
https://github.com/basecamp/marginalia
1
https://github.com/basecamp/easymon
1
https://github.com/aws/aws-sdk-ruby
1
https://github.com/zendesk/samlr
1
https://github.com/auth0/omniauth-auth0
1
https://github.com/asteinhauser/fat_free_crm
1
https://github.com/asciidoctor/asciidoctor
1
https://github.com/ankane/pgsync
1
https://github.com/zenspider/ruby_parser-legacy
1
https://github.com/zvory/csv-safe
1
https://github.com/ankane/clockwork_web
1
https://github.com/ankane/chartkick.js
1
https://gitlab.com/2013/11
1
https://github.com/ankane/blazer
1
https://github.com/amro/gibbon
1
https://github.com/alphagov/tech-docs-gem
1
https://github.com/alexreisner/geocoder
1
https://github.com/AlchemyCMS/alchemy_cms
1
https://github.com/airbrake/airbrake-ruby
1
https://github.com/ahorner/text-helpers
1
https://github.com/affix/CVE-2022-36231
1
https://github.com/adamzaninovich/sounder
1
https://github.com/elastic/logstash
1
https://github.com/elastic/apm-agent-ruby
1
https://github.com/ejschmitt/delayed_job_web
1
https://github.com/dspinhirne/netaddr-rb
1
https://github.com/doorkeeper-gem/doorkeeper-openid_connect
1
https://github.com/voloko/twitter-stream
1
https://github.com/dmendel/bindata
1
https://github.com/discourse/rails_multisite
1
https://github.com/discourse/message_bus
1
https://github.com/denkGroot/Spina
1
https://github.com/dejan/espeak-ruby
1
https://github.com/wconrad/ftpd
1
https://github.com/datamapper/extlib
1
https://github.com/webbynode/webbynode
1
https://github.com/ConradIrwin/em-imap
1
https://github.com/collectiveidea/audited
1
https://github.com/whiteleaf7/narou
1
https://github.com/codders/dataset
1
https://github.com/wycats/handlebars.js
1
https://github.com/chef/mixlib-archive
1
https://github.com/cgriego/active_attr
1
https://github.com/XKCP/XKCP
1
https://github.com/camilova/activerecord-update-by-case
1
https://github.com/bvsatyaram/random_password_generator
1
https://github.com/bundler/bundler
1
https://github.com/ytti/oxidized-web
1
https://github.com/sinatra/rack-protection
1
https://github.com/rf-/keynote
1
https://github.com/restforce/restforce
1
https://github.com/sisimai/rb-sisimai
1
https://github.com/resque/resque-scheduler
1
https://github.com/Smashing/smashing
1
https://github.com/redis-store/redis-store
1
https://github.com/recurly/recurly-client-ruby
1
https://github.com/rdoc/rdoc
1
https://github.com/rcook/rgpg
1
https://github.com/rapid7/metasploit-framework
1
https://github.com/rails/web-console
1
https://github.com/rails/sprockets
1
https://github.com/Snorby/snorby
1
https://github.com/socketry/protocol-http1
1
https://github.com/rails/kredis
1
https://github.com/rails/jquery-rails
1
https://github.com/rails/globalid
1
https://github.com/railsdog/spree
1
https://github.com/railsadminteam/rails_admin
1
https://github.com/rails/activeresource
1