Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

rubygems rubygems-update Security Advisories

Browse all Security Advisories for rubygems rubygems-update

Loading...
Moderate
GSA_kwCzR0hTQS0yMjhmLWczaDctM2ZqM84AAe0N
RubyGems HTTPS to HTTP redirect
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS01bWdqLW12djgtNDZtd84AAe0M
RubyGems does not verify SSL certificate
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1xdjYyLXhmajYtMzJ4bc4AAYCz
RubyGems Improper Input Validation vulnerability
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS05cXZtLTJ2aGYtcTY0Oc4AAYC6
RubyGems Regular Expression Denial of Service
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS04cXhnLW1mZjUtajN3Y84AAUt2
RubyGems Path Traversal vulnerability
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 20.4
Published: over 2 years ago
High
GSA_kwCzR0hTQS13cDNqLXJ2ZnAtNjI0aM4AATla
RubyGems vulnerable to DNS hijack attack
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS05ajdtLXJqcXgtNDh2aM4AATk3
RubyGems Regular Expression Denial of Service vulnerability
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
High
GSA_kwCzR0hTQS1wN2YyLXJyNDItbTl4bc4AATe8
RubyGems Improper Input Validation vulnerability
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 2 years ago
High
GSA_kwCzR0hTQS1xajJ3LW13MnItcHYzOc4AATbJ
RubyGems Deserialization of Untrusted Data vulnerability
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 28.9
Published: over 2 years ago
Critical
GSA_kwCzR0hTQS1tYzZqLWg5NDgtdjJwNs4AATbI
RubyGems Improper Verification of Cryptographic Signature vulnerability
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 36.3
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1ndjg2LTQzcnYtNzltMs4AATay
RubyGems Improper Input Validation vulnerability
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 19.6
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS04N3F4LWc1d2ctbXdtas4AATa0
RubyGems Cross-site Scripting vulnerability
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 22.6
Published: over 2 years ago
High
GSA_kwCzR0hTQS03NHB2LXY5Z2gtaDI1cM4AASkU
RubyGems Infinite Loop vulnerability
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 27.8
Published: over 2 years ago
High
GSA_kwCzR0hTQS1wbTl4LTQzOTItMmMycM4AARmv
RubyGems may allow a maliciously crafted gem to overwrite files
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 2 years ago
Critical
GSA_kwCzR0hTQS1tcXdyLTRxZjItMmhjds4AARmu
RubyGems vulnerable to Deserialization of Untrusted Data
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: over 2 years ago
Critical
GSA_kwCzR0hTQS03Z2NwLTJnbXEtdzN4aM4AARmK
RubyGems Code Injection vulnerability
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: over 2 years ago
High
GSA_kwCzR0hTQS03M3c3LTZ3OWctZ2M4d84AARms
RubyGems has Origin Validation Error vulnerability
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 16.7
Published: over 2 years ago
High
GSA_kwCzR0hTQS1neDY5LTZjcDQtaHhyas38Wg
RubyGems Link Following vulnerability
Ecosystems: maven, rubygems
Packages: org.jruby:jruby-stdlib, rubygems-update
Source: GitHub Advisory Database
Blast Radius: 27.8
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS05NXZ4LXE0YzItNjRncs2XWw
RubyGems file overwrite vulnerability
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3bTgtZmp2Ny1qNzc0
RubyGems Escape sequence injection in errors
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV4MzItYzltZi00OWNj
RubyGems Delete directory using symlink when decompressing tar
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: over 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc2d20tNDIycS05Mm1x
Code injection in RubyGems
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 18.1
Published: over 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZyMzItZ3I1Yy14cTVj
RubyGems Escape sequence injection vulnerability in verbose
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1oMzctOGMzZy0zZmdj
RubyGems Escape sequence injection vulnerability in gem owner
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNoNHItcGp2Ni1jcGg5
RubyGems Escape sequence injection vulnerability in api response handling
Ecosystems: rubygems
Packages: rubygems-update
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 5 years ago
Statistics
Advisories: 20,668
Packages: 9,040
Repositories: 2
Ecosystems: 12
Filter by Package
actionpack 60 nokogiri 43 rubygems-update 25 rack 23 puppet 23 activerecord 21 camaleon_cms 14 publify_core 14 activesupport 14 passenger 13 puma 12 actionview 12 rails 11 decidim 11 fat_free_crm 10 bootstrap 9 rails-html-sanitizer 9 bootstrap 9 bootstrap 9 jquery-rails 9 org.webjars:bootstrap 9 twbs/bootstrap 9 bootstrap-sass 8 org.webjars.npm:jquery 8 jquery 8 org.jruby:jruby-stdlib 7 rexml 7 jquery-ui-rails 7 jQuery.UI.Combined 7 org.webjars.npm:jquery-ui 7 jquery-ui 7 bootstrap.sass 7 jQuery 7 ember-source 6 katello 6 loofah 6 doorkeeper 6 webrick 5 spree_auth_devise 5 sidekiq 5 sinatra 5 bootstrap-sass 5 commonmarker 5 grpc 5 grpcio 5 bundler 5 spree 5 avo 4 activestorage 4 carrierwave 4 sanitize 4 ruby-saml 4 devise 4 fluentd 4 rails_admin 4 mail 4 dragonfly 4 yard 3 cgi 3 json-jwt 3 private_address_check 3 openssl 3 phlex 3 chartkick 3 openc3 3 openc3 3 resque 3 git 3 rest-client 3 rdoc 3 google-protobuf 3 decidim-admin 3 com.google.protobuf:protobuf-kotlin 3 omniauth 3 rubyzip 3 gollum 3 com.google.protobuf:protobuf-java 3 activeadmin 3 rack-cors 3 actiontext 3 geminabox 3 decidim-core 3 spina 3 io.grpc:grpc-protobuf 3 devise-two-factor 3 yajl-ruby 2 user_agent_parser 2 ruby-openid 2 cocoapods-downloader 2 mapbox-rails 2 mapbox.js 2 solidus_core 2 radiant 2 git-fastclone 2 actionmailer 2 i18n 2 omniauth-facebook 2 sup 2 @openc3/tool-common 2 paperclip 2 kramdown 2 org.webjars.npm:bootstrap 2 mini_magick 2 pghero 2 bson 2 maximebf/debugbar 2 redcarpet 2 net-ldap 2 omniauth-saml 2 json 2 faye 2 administrate 2 sidekiq-unique-jobs 2 echor 2 facter 2 field_test 2 kaminari 2 logstash-core 2 decidim-templates 2 VladTheEnterprising 2 twitter-bootstrap-rails 2 ox 2 decidim-meetings 2 pageflow 2 uri 2 view_component 2 secure_headers 2 pyarrow 2 red-arrow 2 pdfkit 2 com.google.protobuf:protobuf-kotlin-lite 2 com.google.protobuf:protobuf-javalite 2 sprockets 2 mechanize 2 solidus_frontend 2 safemode 2 httparty 2 qiita-markdown 2 features 1 delayed_job_web 1 org.jruby:jruby-parent 1 grape 1 request_store 1 arabic-prawn 1 devise_token_auth 1 padrino-contrib 1 sprout 1 rack-contrib 1 newrelic_rpm 1 bolt 1 elastic-apm 1 arr-pm 1 rack-cache 1 solidus_auth_devise 1 cairo 1 rgpg 1 spree_api 1 codders-dataset 1 karo 1 omniauth-apple 1 protocol-http1 1 karteek-docsplit 1 xaviershay-dm-rails 1 samlr 1 cocaine 1 backup_checksum 1 backup-agoddard 1 audited 1 consul 1 octokit 1 kajam 1 govuk_tech_docs 1 gon 1 redcloth 1 em-http-request 1 command_wrap 1 openshift-origin-node 1 kubeclient 1 smashing 1 omniauth-weibo-oauth2 1 ccsv 1 authlogic 1 activejob 1 personnummer 1 kcapifony 1 brbackup 1 show_in_browser 1 rmagick 1 active_attr 1 fog-dragonfly 1 lean-ruport 1 solidus_backend 1 fileutils 1 rbovirt 1 extlib 1 openshift-origin-controller 1 gemirro 1 rack-protection 1 webbynode 1 devise_masquerade 1