Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

rubygems publify_core Security Advisories

Browse all Security Advisories for rubygems publify_core

Loading...
Moderate
GSA_kwCzR0hTQS1nN2dmLTJycXctNXJ3eM4AAxPk
Publify contains Weak Password Requirements
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 5.9
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS1yYzQyLWpnaGYtdnI4Zs4AAw-0
Integer overflow in publify_core
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 8.9
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS1xM3JtLWY1MjctZ2h4as4AAw-1
Publify Improper Input Validation vulnerability
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 8.9
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS03OXdxLWc0djktZ2ZqNM4AAw-2
Publify Core does not strip metadata from images
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 5.9
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS13bWg5LXgyOGotYzZncs4AArK6
Cross site scripting in publify
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 4.9
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS0zaDd2LXdxdzctZmYyOM4AArCV
Cross site scripting in publify
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 4.9
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1jMjczLWM2dmctNHB2Nc4AAgd6
Publify has Improper Access Controls
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 3.9
Published: over 2 years ago
Critical
GSA_kwCzR0hTQS0zaHd4LWM2Y3AtcTk3Ms4AAgdi
Publify vulnerable to cross site scripting
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 8.2
Published: over 2 years ago
High
GSA_kwCzR0hTQS12cTc0LTk1ODMtaHJtNM4AAgUu
Publify vulnerable to DoS attack
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 6.8
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS01am03LWc1MjctbTY5NM4AAX7R
Publify exposes article metadata
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 4.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS13NzhxLTR3MzQtanJqeM4AAX6n
Publify vulnerable to code injection
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 5.9
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS03OW0zLXEzd2gtYzNxbc4AAX6X
Publify Incorrect Authorization
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 5.9
Published: over 2 years ago
High
GSA_kwCzR0hTQS14M3JxLXIzY20tNXZjNM0psw
Publify Business Logic Errors
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 6.8
Published: almost 3 years ago
Moderate
GSA_kwCzR0hTQS14MjRqLTg3eDktanZ2Nc0W1Q
Publify `guest` role users can self-register even when the admin does not allow it
Ecosystems: rubygems
Packages: publify_core
Source: GitHub Advisory Database
Blast Radius: 5.9
Published: about 3 years ago
Statistics
Advisories: 20,668
Packages: 9,040
Repositories: 2
Ecosystems: 12
Filter by Package
actionpack 60 nokogiri 43 rubygems-update 25 rack 23 puppet 23 activerecord 21 camaleon_cms 14 publify_core 14 activesupport 14 passenger 13 actionview 12 puma 12 decidim 11 rails 11 fat_free_crm 10 jquery-rails 9 rails-html-sanitizer 9 org.webjars:bootstrap 9 bootstrap 9 bootstrap 9 twbs/bootstrap 9 bootstrap 9 jquery 8 org.webjars.npm:jquery 8 bootstrap-sass 8 bootstrap.sass 7 jQuery.UI.Combined 7 org.webjars.npm:jquery-ui 7 org.jruby:jruby-stdlib 7 jquery-ui-rails 7 jquery-ui 7 rexml 7 jQuery 7 doorkeeper 6 loofah 6 ember-source 6 katello 6 spree_auth_devise 5 bootstrap-sass 5 webrick 5 grpcio 5 grpc 5 sidekiq 5 spree 5 bundler 5 sinatra 5 commonmarker 5 activestorage 4 dragonfly 4 ruby-saml 4 fluentd 4 rails_admin 4 avo 4 mail 4 devise 4 carrierwave 4 sanitize 4 google-protobuf 3 rack-cors 3 spina 3 yard 3 openc3 3 resque 3 openc3 3 actiontext 3 decidim-admin 3 git 3 io.grpc:grpc-protobuf 3 rest-client 3 geminabox 3 rdoc 3 rubyzip 3 openssl 3 chartkick 3 omniauth 3 gollum 3 json-jwt 3 decidim-core 3 phlex 3 activeadmin 3 devise-two-factor 3 com.google.protobuf:protobuf-kotlin 3 cgi 3 private_address_check 3 com.google.protobuf:protobuf-java 3 httparty 2 VladTheEnterprising 2 net-ldap 2 omniauth-facebook 2 pghero 2 sidekiq-unique-jobs 2 cocoapods-downloader 2 facter 2 bson 2 git-fastclone 2 user_agent_parser 2 twitter-bootstrap-rails 2 json 2 mini_magick 2 paperclip 2 kaminari 2 pdfkit 2 field_test 2 solidus_frontend 2 redcarpet 2 faye 2 sprockets 2 mechanize 2 omniauth-saml 2 yajl-ruby 2 i18n 2 ruby-openid 2 mapbox-rails 2 mapbox.js 2 echor 2 secure_headers 2 sup 2 view_component 2 solidus_core 2 decidim-meetings 2 maximebf/debugbar 2 @openc3/tool-common 2 kramdown 2 uri 2 org.webjars.npm:bootstrap 2 red-arrow 2 pyarrow 2 actionmailer 2 pageflow 2 administrate 2 decidim-templates 2 qiita-markdown 2 radiant 2 com.google.protobuf:protobuf-kotlin-lite 2 com.google.protobuf:protobuf-javalite 2 ox 2 safemode 2 logstash-core 2 solidus_backend 1 rack-mini-profiler 1 cap-strap 1 rmagick 1 ruby-jss 1 blazer 1 hiera 1 mcollective-client 1 wicked 1 solidus_auth_devise 1 kelredd-pruview 1 restforce 1 keynote 1 multi_xml 1 geokit-rails 1 gitlab-grit 1 sqlite3-ruby 1 foreman_ansible 1 sequenceserver 1 twitter-stream 1 thin 1 pysha3 1 railties 1 fugit 1 websocket-extensions 1 sha3 1 hub 1 github.com/github/hub 1 matestack-ui-core 1 discordrb 1 diffy 1 recurly 1 md2pdf 1 sounder 1 date 1 octopoller 1 pwpush 1 paratrooper-newrelic 1 jmespath 1 trilogy 1 sentry-raven 1 ruby_parser 1 better_errors 1 mongrel 1 unpoly-rails 1 oxidized-web 1 netaddr 1 MPXJ.Net 1 net.sf.mpxj-for-vb 1 net.sf.mpxj-for-csharp 1 net.sf.mpxj 1 mpxj 1 mpxj 1 net.sf.mpxj:mpxj 1 jquery 1 decidim-decidim_awesome 1 bindata 1 rubocop 1 ruby-mysql 1 gtk2 1 rotp 1 @turbo-boost/commands 1