Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
rubygems rubygems-update Security Advisories
Browse all Security Advisories for rubygems rubygems-update
Loading...
Moderate
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
GSA_kwCzR0hTQS0yMjhmLWczaDctM2ZqM84AAe0N
RubyGems HTTPS to HTTP redirectEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
GSA_kwCzR0hTQS01bWdqLW12djgtNDZtd84AAe0M
RubyGems does not verify SSL certificateEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
GSA_kwCzR0hTQS1xdjYyLXhmajYtMzJ4bc4AAYCz
RubyGems Improper Input Validation vulnerabilityEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
GSA_kwCzR0hTQS05cXZtLTJ2aGYtcTY0Oc4AAYC6
RubyGems Regular Expression Denial of ServiceEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 20.4
Published: over 2 years ago
GSA_kwCzR0hTQS04cXhnLW1mZjUtajN3Y84AAUt2
RubyGems Path Traversal vulnerabilityEcosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 20.4
Published: over 2 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
GSA_kwCzR0hTQS13cDNqLXJ2ZnAtNjI0aM4AATla
RubyGems vulnerable to DNS hijack attackEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
GSA_kwCzR0hTQS05ajdtLXJqcXgtNDh2aM4AATk3
RubyGems Regular Expression Denial of Service vulnerabilityEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 2 years ago
GSA_kwCzR0hTQS1wN2YyLXJyNDItbTl4bc4AATe8
RubyGems Improper Input Validation vulnerabilityEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 2 years ago
High
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 28.9
Published: over 2 years ago
GSA_kwCzR0hTQS1xajJ3LW13MnItcHYzOc4AATbJ
RubyGems Deserialization of Untrusted Data vulnerabilityEcosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 28.9
Published: over 2 years ago
Critical
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 36.3
Published: over 2 years ago
GSA_kwCzR0hTQS1tYzZqLWg5NDgtdjJwNs4AATbI
RubyGems Improper Verification of Cryptographic Signature vulnerabilityEcosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 36.3
Published: over 2 years ago
Moderate
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 19.6
Published: over 2 years ago
GSA_kwCzR0hTQS1ndjg2LTQzcnYtNzltMs4AATay
RubyGems Improper Input Validation vulnerabilityEcosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 19.6
Published: over 2 years ago
Moderate
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 22.6
Published: over 2 years ago
GSA_kwCzR0hTQS04N3F4LWc1d2ctbXdtas4AATa0
RubyGems Cross-site Scripting vulnerabilityEcosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 22.6
Published: over 2 years ago
High
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 27.8
Published: over 2 years ago
GSA_kwCzR0hTQS03NHB2LXY5Z2gtaDI1cM4AASkU
RubyGems Infinite Loop vulnerabilityEcosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 27.8
Published: over 2 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 2 years ago
GSA_kwCzR0hTQS1wbTl4LTQzOTItMmMycM4AARmv
RubyGems may allow a maliciously crafted gem to overwrite filesEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 2 years ago
Critical
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: over 2 years ago
GSA_kwCzR0hTQS1tcXdyLTRxZjItMmhjds4AARmu
RubyGems vulnerable to Deserialization of Untrusted DataEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: over 2 years ago
Critical
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: over 2 years ago
GSA_kwCzR0hTQS03Z2NwLTJnbXEtdzN4aM4AARmK
RubyGems Code Injection vulnerabilityEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: over 2 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 16.7
Published: over 2 years ago
GSA_kwCzR0hTQS03M3c3LTZ3OWctZ2M4d84AARms
RubyGems has Origin Validation Error vulnerabilityEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 16.7
Published: over 2 years ago
High
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 27.8
Published: over 2 years ago
GSA_kwCzR0hTQS1neDY5LTZjcDQtaHhyas38Wg
RubyGems Link Following vulnerabilityEcosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 27.8
Published: over 2 years ago
Moderate
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
GSA_kwCzR0hTQS05NXZ4LXE0YzItNjRncs2XWw
RubyGems file overwrite vulnerabilityEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3bTgtZmp2Ny1qNzc0
RubyGems Escape sequence injection in errorsEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 5 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV4MzItYzltZi00OWNj
RubyGems Delete directory using symlink when decompressing tarEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: over 5 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 18.1
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc2d20tNDIycS05Mm1x
Code injection in RubyGemsEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 18.1
Published: over 5 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZyMzItZ3I1Yy14cTVj
RubyGems Escape sequence injection vulnerability in verboseEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 5 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1oMzctOGMzZy0zZmdj
RubyGems Escape sequence injection vulnerability in gem ownerEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 5 years ago
High
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNoNHItcGp2Ni1jcGg5
RubyGems Escape sequence injection vulnerability in api response handlingEcosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 5 years ago
Statistics
Advisories: 20,668
Packages: 9,040
Repositories: 2
Ecosystems: 12
Packages: 9,040
Repositories: 2
Ecosystems: 12
Filter by Severity
Filter by Ecosystem
Filter by Package
actionpack
60
nokogiri
43
rubygems-update
25
rack
23
puppet
23
activerecord
21
camaleon_cms
14
publify_core
14
activesupport
14
passenger
13
puma
12
actionview
12
rails
11
decidim
11
fat_free_crm
10
bootstrap
9
rails-html-sanitizer
9
bootstrap
9
bootstrap
9
jquery-rails
9
org.webjars:bootstrap
9
twbs/bootstrap
9
bootstrap-sass
8
org.webjars.npm:jquery
8
jquery
8
org.jruby:jruby-stdlib
7
rexml
7
jquery-ui-rails
7
jQuery.UI.Combined
7
org.webjars.npm:jquery-ui
7
jquery-ui
7
bootstrap.sass
7
jQuery
7
ember-source
6
katello
6
loofah
6
doorkeeper
6
webrick
5
spree_auth_devise
5
sidekiq
5
sinatra
5
bootstrap-sass
5
commonmarker
5
grpc
5
grpcio
5
bundler
5
spree
5
avo
4
activestorage
4
carrierwave
4
sanitize
4
ruby-saml
4
devise
4
fluentd
4
rails_admin
4
mail
4
dragonfly
4
yard
3
cgi
3
json-jwt
3
private_address_check
3
openssl
3
phlex
3
chartkick
3
openc3
3
openc3
3
resque
3
git
3
rest-client
3
rdoc
3
google-protobuf
3
decidim-admin
3
com.google.protobuf:protobuf-kotlin
3
omniauth
3
rubyzip
3
gollum
3
com.google.protobuf:protobuf-java
3
activeadmin
3
rack-cors
3
actiontext
3
geminabox
3
decidim-core
3
spina
3
io.grpc:grpc-protobuf
3
devise-two-factor
3
yajl-ruby
2
user_agent_parser
2
ruby-openid
2
cocoapods-downloader
2
mapbox-rails
2
mapbox.js
2
solidus_core
2
radiant
2
git-fastclone
2
actionmailer
2
i18n
2
omniauth-facebook
2
sup
2
@openc3/tool-common
2
paperclip
2
kramdown
2
org.webjars.npm:bootstrap
2
mini_magick
2
pghero
2
bson
2
maximebf/debugbar
2
redcarpet
2
net-ldap
2
omniauth-saml
2
json
2
faye
2
administrate
2
sidekiq-unique-jobs
2
echor
2
facter
2
field_test
2
kaminari
2
logstash-core
2
decidim-templates
2
VladTheEnterprising
2
twitter-bootstrap-rails
2
ox
2
decidim-meetings
2
pageflow
2
uri
2
view_component
2
secure_headers
2
pyarrow
2
red-arrow
2
pdfkit
2
com.google.protobuf:protobuf-kotlin-lite
2
com.google.protobuf:protobuf-javalite
2
sprockets
2
mechanize
2
solidus_frontend
2
safemode
2
httparty
2
qiita-markdown
2
features
1
delayed_job_web
1
org.jruby:jruby-parent
1
grape
1
request_store
1
arabic-prawn
1
devise_token_auth
1
padrino-contrib
1
sprout
1
rack-contrib
1
newrelic_rpm
1
bolt
1
elastic-apm
1
arr-pm
1
rack-cache
1
solidus_auth_devise
1
cairo
1
rgpg
1
spree_api
1
codders-dataset
1
karo
1
omniauth-apple
1
protocol-http1
1
karteek-docsplit
1
xaviershay-dm-rails
1
samlr
1
cocaine
1
backup_checksum
1
backup-agoddard
1
audited
1
consul
1
octokit
1
kajam
1
govuk_tech_docs
1
gon
1
redcloth
1
em-http-request
1
command_wrap
1
openshift-origin-node
1
kubeclient
1
smashing
1
omniauth-weibo-oauth2
1
ccsv
1
authlogic
1
activejob
1
personnummer
1
kcapifony
1
brbackup
1
show_in_browser
1
rmagick
1
active_attr
1
fog-dragonfly
1
lean-ruport
1
solidus_backend
1
fileutils
1
rbovirt
1
extlib
1
openshift-origin-controller
1
gemirro
1
rack-protection
1
webbynode
1
devise_masquerade
1
Filter by Repository