| CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElementCVE-2025-27220 · GHSA-MHWM-JH88-3GJF |
Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby |
Red HatRubyGems |
Medium
|
Fix reported |
|
| net-imap vulnerable to STARTTLS stripping via invalid response timingCVE-2026-42246 · GHSA-VCGP-9326-PQCP |
Red Hat Enterprise Linux 6/rubynet-imap |
Red HatRubyGems |
High
|
Fix reported |
|
| Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruptionCVE-2026-27820 · GHSA-G857-HHFV-J68W |
Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby |
Red HatRubyGems |
Medium
|
Fix reported |
|
| resolv vulnerable to DoS via insufficient DNS domain name length validationCVE-2025-24294 · GHSA-XH69-987W-HRP8 |
Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby |
Red HatRubyGems |
Medium
|
Fix reported |
|
| Possible DoS by memory exhaustion in net-imapCVE-2025-25186 · GHSA-7FC5-F82F-CX69 |
Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8Red Hat Enterprise Linux 10/rhel10-beta/flatpak-sdk |
Red HatRubyGems |
Medium
|
Fix reported |
|
| REXML contains a denial of service vulnerabilityCVE-2024-35176 · GHSA-VG3R-RM7W-2XGH |
Red Hat Enterprise Linux 10/rubyRed Hat Enterprise Linux 6/ruby |
Red HatRubyGems |
Medium
|
Fix reported |
|
| StringIO buffer overread vulnerabilityCVE-2024-27280 · GHSA-V5H6-C2HV-HV3R |
Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby |
Red HatRubyGems |
Critical
|
Fix reported |
|
| RDoc RCE vulnerability with .rdoc_optionsCVE-2024-27281 · GHSA-592J-995H-P23J |
Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby |
Red HatRubyGems |
Low
|
Fix reported |
|
| Ruby URI component ReDoS issueCVE-2023-28755 · GHSA-HV5J-3H9F-99C2 |
Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby |
Red HatRubyGems |
High
|
Fix reported |
|
| CGI has Denial of Service (DoS) potential in Cookie.parseCVE-2025-27219 · GHSA-GH9Q-2XRM-X6QV |
Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby |
Red HatRubyGems |
Medium
|
Fix reported |
|
| Ruby Time component ReDoS issueCVE-2023-28756 · GHSA-FG7X-G82R-94QC |
Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby |
Red HatRubyGems |
High
|
Fix reported |
|
| HTTP response splitting in CGICVE-2021-33621 · GHSA-VC47-6RQG-C7F5 |
Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby |
Red HatRubyGems |
High
|
Fix reported |
|
| REXML ReDoS vulnerabilityCVE-2024-49761 · GHSA-2RXP-V6PW-CH6M |
Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel9 |
Red HatRubyGems |
Medium
|
Fix reported |
|
| Ruby WEBrick read_headers method can lead to HTTP Request/Response SmugglingCVE-2025-6442 · GHSA-R995-Q44H-HR64 |
Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 |
Red HatRubyGems |
Medium
|
Fix reported |
|
| WEBRick vulnerable to HTTP Request/Response SmugglingCVE-2020-25613 · GHSA-GWFG-CQMG-CF8F |
CloudForms Management Engine 5/rubyRed Hat 3scale API Management Platform 2/ruby-rack |
Red HatRubyGems |
High
|
Fix reported |
|
| Ruby Openssl Allows Incorrect Value ComparisonCVE-2018-16395 · GHSA-MMRQ-6999-72V8 |
Red Hat Enterprise Linux 5/rubyRed Hat Enterprise Linux 6/ruby |
Red HatRubyGems |
Critical
|
Fix reported |
|
| WEBrick RCE VulnerabilityCVE-2017-10784 · GHSA-369M-2GV6-MW28 |
Red Hat Enterprise Linux 5/rubyRed Hat Enterprise Linux 6/ruby |
Red HatRubyGems |
High
|
Fix reported |
|
| OpenSSL gem for Ruby using inadequate encryption strengthCVE-2016-7798 · GHSA-6H88-QJPV-P32M |
CloudForms Management Engine 5/rh-ruby22-rubyCloudForms Management Engine 5/ruby-200-ruby |
Red HatRubyGems |
High
|
Fix reported |
|
| Regular expression denial of service vulnerability (ReDoS) in dateCVE-2021-41817 · GHSA-QG54-694P-WGPP |
Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby |
Red HatRubyGems |
High
|
Fix reported |
|
| Cookie Prefix Spoofing in CGI::Cookie.parseCVE-2021-41819 · GHSA-4VF4-QMVG-MH7H |
Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby |
Red HatRubyGems |
High
|
Fix reported |
|
