rubygems
201,122 packages · rubygems.org
Security Advisories for https://github.com/puppetlabs/puppet in rubygems Clear Filters
Moderate
over 3 years ago
Puppet uses predictable filenames, allowing arbitrary file overwrite
rubygems
puppet
Moderate
over 3 years ago
Puppet does not properly restrict access to node resources
rubygems
puppet
Moderate
over 3 years ago
Puppet allows local users to modify the permissions of arbitrary files
rubygems
puppet
Moderate
over 3 years ago
Puppet uses predictable filenames, allowing arbitrary file overwrite
rubygems
puppet
Low
about 8 years ago
Puppet supports use of IP addresses in certnames without warning of potential risks
rubygems
puppet
Low
about 8 years ago
Puppet allows local users to obtain sensitive configuration information
rubygems
puppet
Moderate
about 8 years ago
Pupper does not properly restrict characters in Common Name field of Certificate Signing Request
rubygems
puppet
Filter by Severity
Filter by Package
actionpack
58
nokogiri
45
rack
35
rubygems-update
25
puppet
23
activerecord
22
publify_core
15
rails-html-sanitizer
14
activesupport
14
camaleon_cms
14
passenger
14
puma
12
actionview
11
decidim
11
rails
10
fat_free_crm
10
rexml
8
ruby-saml
8
org.jruby:jruby-stdlib
7
webrick
6
katello
6
spree
6
doorkeeper
6
jquery-rails
6
loofah
6
ember-source
6
sinatra
6
bootstrap
5
bundler
5
activestorage
5
grpc
5
commonmarker
5
sidekiq
5
cgi
5
bootstrap
5
mail
4
avo
4
jQuery
4
bootstrap-sass
4
rails_admin
4
dragonfly
4
sanitize
4
devise
4
carrierwave
4
grpcio
4
yard
3
decidim-core
3
org.webjars.npm:jquery-ui
3
json-jwt
3
openssl
3
rest-client
3
jQuery.UI.Combined
3
chartkick
3
devise-two-factor
3
omniauth-saml
3
jquery-ui
3
io.grpc:grpc-protobuf
3
rack-cors
3
rubyzip
3
gollum
3
git
3
org.webjars.npm:jquery
3
bootstrap
3
omniauth
3
private_address_check
3
activeadmin
3
spina
3
fluentd
3
rdoc
3
openc3
3
json
3
phlex
3
geminabox
3
uri
3
com.google.protobuf:protobuf-java
3
jquery-ui-rails
3
bootstrap-sass
3
decidim-admin
3
resque
3
jquery
3
google-protobuf
3
bson
2
mechanize
2
solidus_frontend
2
solidus_core
2
net-ldap
2
decidim-meetings
2
paperclip
2
ruby-openid
2
httparty
2
omniauth-facebook
2
faye
2
pghero
2
openc3-cosmos-tool-iframe
2
radiant
2
sprockets
2
com.google.protobuf:protobuf-kotlin-lite
2
com.google.protobuf:protobuf-kotlin
2
qiita-markdown
2
actiontext
2
yajl-ruby
2
kramdown
2
com.google.protobuf:protobuf-javalite
2
google_sign_in
2
cocoapods-downloader
2
@openc3/tool-common
2
i18n
2
sidekiq-unique-jobs
2
secure_headers
2
actionmailer
2
VladTheEnterprising
2
pdfkit
2
twbs/bootstrap
2
view_component
2
net-imap
2
prosemirror_to_html
2
oxidized-web
2
administrate
2
org.webjars:bootstrap
2
spree_auth_devise
2
sup
2
mini_magick
2
facter
2
safemode
2
kaminari
2
pwpush
2
lodash-rails
2
field_test
2
git-fastclone
2
decidim-templates
2
ox
2
pageflow
2
echor
2
lodash-es
2
lodash
2
red-arrow
2
redcarpet
2
logstash-core
2
ldap_fluff
1
doorkeeper-openid_connect
1
mcollective-client
1
activeresource
1
delayed_job_web
1
mpxj
1
dependabot-common
1
slanger
1
omniauth_amazon
1
codders-dataset
1
easymon
1
rubocop
1
paratrooper-pingdom
1
pysha3
1
user_agent_parser
1
discordrb
1
curupira
1
features
1
ruby-mysql
1
keynote
1
ftpd
1
globalid
1
ruby_parser
1
pdf_info
1
decidim-decidim_awesome
1
pubnub/pubnub
1
stimulus_reflex
1
awesome_spawn
1
random_password_generator
1
extlib
1
mongrel
1
actionpack-page_caching
1
backup-agoddard
1
nori
1
@turbo-boost/commands
1
jquery-ujs
1
chloride
1
dependabot-omnibus
1
clockwork_web
1
rack-ssl
1
org.jruby:jruby-parent
1
elastic-apm
1
webbynode
1
pgsync
1
command_wrap
1
aescrypt
1
paratrooper-newrelic
1
festivaltts4r
1
jmespath
1
rgpg
1
multi_xml
1
kafo
1
ruby-jss
1
metasploit-framework
1
sqlite-vec
1
recurly
1
cremefraiche
1
smashing
1
netaddr
1
RedCloth
1
wicked
1
solidus_api
1
Filter by Repository
https://github.com/rails/rails
70
https://github.com/sparklemotion/nokogiri
35
https://github.com/rack/rack
29
https://github.com/rubygems/rubygems
18
https://github.com/decidim/decidim
15
https://github.com/puppetlabs/puppet
15
https://github.com/rails/rails-html-sanitizer
14
https://github.com/publify/publify
14
https://github.com/puma/puma
12
https://github.com/phusion/passenger
11
https://github.com/owen2345/camaleon-cms
11
https://github.com/fatfreecrm/fat_free_crm
9
https://github.com/ruby/rexml
8
https://github.com/SAML-Toolkits/ruby-saml
7
https://github.com/jquery/jquery
6
https://github.com/flavorjones/loofah
6
https://github.com/doorkeeper-gem/doorkeeper
6
https://github.com/sinatra/sinatra
6
https://github.com/solidusio/solidus
5
https://github.com/OpenC3/cosmos
5
https://github.com/twbs/bootstrap
5
https://github.com/mikel/mail
4
https://github.com/grpc/grpc
4
https://github.com/ruby/openssl
4
https://github.com/markevans/dragonfly
4
https://github.com/rgrove/sanitize
4
https://github.com/ruby/webrick
4
https://github.com/avo-hq/avo
4
https://github.com/Katello/katello
4
https://github.com/carrierwaveuploader/carrierwave
4
https://github.com/gjtorikian/commonmarker
3
https://github.com/protocolbuffers/protobuf
3
https://github.com/phlex-ruby/phlex
3
https://github.com/ruby/cgi
3
https://github.com/rest-client/rest-client
3
https://github.com/jtdowney/private_address_check
3
https://github.com/rubyzip/rubyzip
3
https://github.com/sidekiq/sidekiq
3
https://github.com/ruby-git/ruby-git
3
https://github.com/geminabox/geminabox
3
https://github.com/ruby/uri
3
https://github.com/spree/spree
3
https://github.com/activeadmin/activeadmin
3
https://github.com/fluent/fluentd
3
https://github.com/resque/resque
3
https://github.com/gollum/gollum
3
https://github.com/lsegal/yard
3
https://github.com/cyu/rack-cors
3
https://github.com/rubygems/rubygems.org
3
https://github.com/CocoaPods/cocoapods-downloader
2
https://github.com/twitter/secure_headers
2
https://github.com/ankane/pghero
2
https://github.com/gettalong/kramdown
2
https://github.com/nov/json-jwt
2
https://github.com/solidusio/solidus_auth_devise
2
https://github.com/ankane/field_test
2
https://github.com/github/cmark-gfm
2
https://github.com/lodash/lodash
2
https://github.com/ruby-ldap/ruby-net-ldap
2
https://github.com/ruby/net-imap
2
https://github.com/vmg/redcarpet
2
https://github.com/jquery/jquery-ui
2
https://github.com/rack/rack-session
2
https://github.com/brianmario/yajl-ruby
2
https://github.com/square/git-fastclone
2
https://github.com/ohler55/ox
2
https://github.com/kaminari/kaminari
2
https://gitlab.com/gitlab-org/cves
2
https://github.com/mhenrixon/sidekiq-unique-jobs
2
https://github.com/plataformatec/devise
2
https://github.com/sup-heliotrope/sup
2
https://github.com/ytti/oxidized-web
2
https://github.com/thoughtbot/paperclip
2
https://github.com/railsadminteam/rails_admin
2
https://github.com/ankane/chartkick
2
https://github.com/omniauth/omniauth
2
https://github.com/ruby/rdoc
2
https://github.com/basecamp/google_sign_in
2
https://github.com/faye/faye
2
https://github.com/mongodb/bson-ruby
2
https://github.com/svenfuchs/safemode
2
https://github.com/svenfuchs/i18n
2
https://github.com/sparklemotion/mechanize
2
https://github.com/jnunemaker/httparty
2
https://github.com/openid/ruby-openid
2
https://github.com/pglombardo/PasswordPusher
2
https://github.com/codevise/pageflow
2
https://github.com/emberjs/ember.js
2
https://github.com/mperham/sidekiq
2
https://github.com/increments/qiita-markdown
2
https://github.com/tinfoil/devise-two-factor
2
https://github.com/github/view_component
1
https://github.com/ruby/ruby
1
https://github.com/TrestleAdmin/trestle-auth
1
https://github.com/jekyll/jekyll
1
https://github.com/ankane/chartkick.js
1
https://github.com/dejan/espeak-ruby
1
https://github.com/wurmlab/sequenceserver
1
https://github.com/ViewComponent/view_component
1
https://github.com/VulnSphere/LLMVulnSphere
1
https://github.com/whiteleaf7/narou
1
https://github.com/rtomayko/rack-cache
1
https://github.com/theforeman/smart_proxy_dynflow
1
https://github.com/amro/gibbon
1
https://github.com/rswag/rswag
1
https://github.com/Sorcery/sorcery
1
https://github.com/recurly/recurly-client-ruby
1
https://github.com/paragbagul111/CVE-2023-30145
1
https://github.com/floraison/fugit
1
https://github.com/imsebao/404team
1
https://github.com/plataformatec/simple_form
1
https://github.com/XKCP/XKCP
1
https://github.com/oivoodoo/devise_masquerade
1
https://github.com/petergoldstein/dalli
1
https://github.com/paragbagul111/CVE-2024-48652
1
https://github.com/sparklemotion/nekohtml
1
https://github.com/ffi/ffi
1
https://github.com/schneems/wicked
1
https://github.com/rails/activerecord-session_store
1
https://github.com/thoughtbot/administrate
1
https://github.com/P3ngu1nW/CVE_Request
1
https://github.com/ruby/time
1
https://github.com/ankane/pgsync
1
https://github.com/camilova/activerecord-update-by-case
1
https://github.com/cgriego/active_attr
1
https://github.com/affix/CVE-2022-36231
1
https://github.com/shardlab/discordrb
1
https://github.com/fluent/fluentd-ui
1
https://github.com/rmosolgo/graphql-ruby
1
https://github.com/synth/omniauth-microsoft_graph
1
https://github.com/spejman/festivaltts4r
1
https://github.com/ahorner/text-helpers
1
https://github.com/tigris/open-uri-cached
1
https://github.com/ruby-grape/grape
1
https://github.com/thoughtbot/clearance
1
https://github.com/rubygems/bundler
1
https://github.com/sisimai/rb-sisimai
1
https://github.com/flori/json
1
https://github.com/unpoly/unpoly-rails
1
https://github.com/stimulusreflex/stimulus_reflex
1
https://github.com/octokit/octopoller.rb
1
https://github.com/twbs/bootstrap-sass
1
https://github.com/rails/web-console
1
https://github.com/beenhero/omniauth-weibo-oauth2
1
https://github.com/bbatsov/rubocop
1
https://github.com/alphagov/tech-docs-gem
1
https://gitlab.com/2013/11
1
https://github.com/josh/rack-ssl
1
https://github.com/octokit/octokit.rb
1
https://github.com/Snorby/snorby
1
https://github.com/macournoyer/thin
1
https://github.com/seattlerb/ruby_parser
1
https://github.com/webbynode/webbynode
1
https://github.com/theforeman/ldap_fluff
1
https://github.com/decidim-ice/decidim-module-decidim_awesome
1
https://github.com/quadule/colorscore
1
https://github.com/GNOME/libxml2
1
https://github.com/ConradIrwin/em-imap
1
https://github.com/doorkeeper-gem/doorkeeper-openid_connect
1
https://github.com/rails/jquery-rails
1
https://github.com/exiftool-rb/exiftool_vendored.rb
1
https://github.com/PierreRambaud/gemirro
1
https://github.com/jgarber/redcloth
1
https://github.com/evan/ccsv
1
https://github.com/binarylogic/authlogic
1
https://github.com/BetterErrors/better_errors
1
https://github.com/collectiveidea/audited
1
https://github.com/dmendel/bindata
1
https://github.com/igrigorik/em-http-request
1
https://github.com/autolab/Autolab
1
https://github.com/makandra/consul
1
https://github.com/dspinhirne/netaddr-rb
1
https://github.com/excon/excon
1
https://github.com/spinacms/spina
1
https://github.com/rails/globalid
1
https://github.com/rsantamaria/papercrop
1
https://github.com/zvory/csv-safe
1
https://github.com/zenspider/ruby_parser-legacy
1
https://github.com/alexreisner/geocoder
1
https://github.com/presidentbeef/rails-security-history
1
https://github.com/samg/diffy
1
https://github.com/ankane/blazer
1
https://github.com/jirutka/asciidoctor-include-ext
1
https://github.com/Shopify/omniauth-shopify-oauth2
1
https://github.com/rf-/keynote
1
https://github.com/jamesmartin/inline_svg
1
https://github.com/discourse/rails_multisite
1
https://github.com/Smashing/smashing
1
https://github.com/rapid7/metasploit-framework
1
https://github.com/shrinerb/shrine
1
https://github.com/gazay/gon
1
https://github.com/haml/haml
1
https://github.com/adamzaninovich/sounder
1
https://github.com/rails/actionpack-page_caching
1
https://github.com/auth0/omniauth-auth0
1
https://github.com/faye/faye-websocket-ruby
1
https://github.com/ManageIQ/kubeclient
1
https://github.com/panthomakos/lynx
1
https://github.com/socketry/protocol-http1
1