Security
فارسی
All products

rubygems-update

RubyGems · Package
25 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
RubyGems file overwrite vulnerabilityCVE-2007-0469 · GHSA-95VX-Q4C2-64GR Red Hat Enterprise Linux 6/rubygemsrubygems-update Red HatRubyGems Medium Fix reported
RubyGems HTTPS to HTTP redirectCVE-2012-2125 · GHSA-228F-G3H7-3FJ3 Red Hat Subscription Asset Manager/rubygemsrubygems-update Red HatRubyGems Medium Fix reported
RubyGems Improper Input Validation vulnerabilityCVE-2015-4020 · GHSA-QV62-XFJ6-32XM rubygems-update RubyGems Medium Fix reported
RubyGems does not verify SSL certificateCVE-2012-2126 · GHSA-5MGJ-MVV8-46MW Red Hat Subscription Asset Manager/rubygemsrubygems-update Red HatRubyGems Medium Fix reported
RubyGems vulnerable to DNS hijack attackCVE-2015-3900 · GHSA-WP3J-RVFP-624H Red Hat Enterprise Linux 7/rubyRed Hat Software Collections/ruby200-ruby Red HatRubyGems High Fix reported
RubyGems Regular Expression Denial of Service vulnerabilityCVE-2013-4287 · GHSA-9J7M-RJQX-48VH CloudForms Management Engine 5/rubygemsOpenShift Enterprise 1/ruby193-ruby Red HatRubyGems Medium Fix reported
RubyGems Regular Expression Denial of ServiceCVE-2013-4363 · GHSA-9QVM-2VHF-Q649 rubygems-update RubyGems Medium Fix reported
RubyGems Cross-site Scripting vulnerabilityCVE-2018-1000078 · GHSA-87QX-G5WG-MWMJ org.jruby:jruby-stdlibRed Hat Enterprise Linux 6/rubygems MavenRed HatRubyGems Medium Fix reported
RubyGems Infinite Loop vulnerabilityCVE-2018-1000075 · GHSA-74PV-V9GH-H25P org.jruby:jruby-stdlibRed Hat Enterprise Linux 6/rubygems MavenRed HatRubyGems High Fix reported
RubyGems Improper Input Validation vulnerabilityCVE-2018-1000077 · GHSA-GV86-43RV-79M2 org.jruby:jruby-stdlibRed Hat Enterprise Linux 6/rubygems MavenRed HatRubyGems Medium Fix reported
RubyGems Link Following vulnerabilityCVE-2018-1000073 · GHSA-GX69-6CP4-HXRJ org.jruby:jruby-stdlibRed Hat Enterprise Linux 6/rubygems MavenRed HatRubyGems High Fix reported
RubyGems Deserialization of Untrusted Data vulnerabilityCVE-2018-1000074 · GHSA-QJ2W-MW2R-PV39 org.jruby:jruby-stdlibRed Hat Enterprise Linux 6/rubygems MavenRed HatRubyGems High Fix reported
RubyGems Path Traversal vulnerabilityCVE-2018-1000079 · GHSA-8QXG-MFF5-J3WC org.jruby:jruby-stdlibRed Hat Enterprise Linux 6/rubygems MavenRed HatRubyGems Medium Fix reported
RubyGems Improper Verification of Cryptographic Signature vulnerabilityCVE-2018-1000076 · GHSA-MC6J-H948-V2P6 org.jruby:jruby-stdlibRed Hat Enterprise Linux 6/rubygems MavenRed HatRubyGems Critical Fix reported
RubyGems vulnerable to Deserialization of Untrusted DataCVE-2017-0903 · GHSA-MQWR-4QF2-2HCV rubygems-update RubyGems Critical Fix reported
RubyGems has Origin Validation Error vulnerabilityCVE-2017-0902 · GHSA-73W7-6W9G-GC8W Red Hat Enterprise Linux 6/rubygemsrubygems-update Red HatRubyGems High Fix reported
RubyGems may allow a maliciously crafted gem to overwrite filesCVE-2017-0901 · GHSA-PM9X-4392-2C2P Red Hat Enterprise Linux 6/rubygemsrubygems-update Red HatRubyGems High Fix reported
RubyGems Delete directory using symlink when decompressing tarCVE-2019-8320 · GHSA-5X32-C9MF-49CC Red Hat Software Collections/rh-ruby23-rubyrubygems-update Red HatRubyGems High Fix reported
RubyGems Escape sequence injection vulnerability in api response handlingCVE-2019-8323 · GHSA-3H4R-PJV6-CPH9 Red Hat Enterprise Linux 6/rubygemsRed Hat Software Collections/rh-ruby23-ruby Red HatRubyGems High Fix reported
RubyGems Escape sequence injection vulnerability in gem ownerCVE-2019-8322 · GHSA-MH37-8C3G-3FGC Red Hat Enterprise Linux 6/rubygemsRed Hat Software Collections/rh-ruby23-ruby Red HatRubyGems High Fix reported