Red Hat Enterprise Linux 10/ubi10/ruby-33

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Ruby json: JSON generator heap buffer overflow when streaming to an IOCVE-2026-54696 · GHSA-X2F5-4PRF-W687	Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7	Red HatRubyGems	Low	Fix reported	2026-09-10
urllib3 allows an unbounded number of links in the decompression chainCVE-2025-66418 · GHSA-GM62-XV2J-4W53Version ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
URI Credential Leakage Bypass over CVE-2025-27221CVE-2025-61594 · GHSA-J4PR-3WM6-XX2R	Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 Red Hat Enterprise Linux 10/ruby	Red HatRubyGems	Low	Fix reported	2026-09-10
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)CVE-2026-21441 · GHSA-38JV-5279-WG99Version ranges need review.	urllib3 External Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)CVE-2025-61772 · GHSA-WPV5-97WM-HP9C	Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator	Red HatRubyGems	High	Fix reported	2026-09-10
resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnamesCVE-2026-80213	Lightspeed Core/lightspeed-core/rag-tool-cpu-rhel9 Lightspeed Core/lightspeed-core/rag-tool-cuda-12.9-rhel9	Red Hat	Medium	No fix reported	Not recorded