rubygems

rubygems-update

View on rubygems registry
25 Total advisories
25 Vulnerabilities
0 Malware

Dependency scanning

Check whether rubygems-update is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Vulnerabilities

UNKNOWN
RubyGems

CVE-2007-0469

RubyGems file overwrite vulnerability

UNKNOWN
RubyGems

CVE-2012-2125

RubyGems HTTPS to HTTP redirect

UNKNOWN
RubyGems

CVE-2015-4020

RubyGems Improper Input Validation vulnerability

UNKNOWN
RubyGems

CVE-2012-2126

RubyGems does not verify SSL certificate

UNKNOWN
RubyGems

CVE-2015-3900

RubyGems vulnerable to DNS hijack attack

UNKNOWN
RubyGems

CVE-2013-4287

RubyGems Regular Expression Denial of Service vulnerability

UNKNOWN
RubyGems

CVE-2013-4363

RubyGems Regular Expression Denial of Service

MEDIUM 6.1
RubyGems

CVE-2018-1000078

RubyGems Cross-site Scripting vulnerability

HIGH 7.5
RubyGems

CVE-2018-1000075

RubyGems Infinite Loop vulnerability

MEDIUM 5.3
RubyGems

CVE-2018-1000077

RubyGems Improper Input Validation vulnerability

HIGH 7.5
RubyGems

CVE-2018-1000073

RubyGems Link Following vulnerability

HIGH 7.8
RubyGems

CVE-2018-1000074

RubyGems Deserialization of Untrusted Data vulnerability

MEDIUM 5.5
RubyGems

CVE-2018-1000079

RubyGems Path Traversal vulnerability

CRITICAL 9.8
RubyGems

CVE-2018-1000076

RubyGems Improper Verification of Cryptographic Signature vulnerability

CRITICAL 9.8
RubyGems

CVE-2017-0903

RubyGems vulnerable to Deserialization of Untrusted Data

HIGH 8.1
RubyGems

CVE-2017-0902

RubyGems has Origin Validation Error vulnerability

HIGH 7.5
RubyGems

CVE-2017-0901

RubyGems may allow a maliciously crafted gem to overwrite files

HIGH 7.4
RubyGems

CVE-2019-8320

RubyGems Delete directory using symlink when decompressing tar

HIGH 7.5
RubyGems

CVE-2019-8323

RubyGems Escape sequence injection vulnerability in api response handling

HIGH 7.5
RubyGems

CVE-2019-8322

RubyGems Escape sequence injection vulnerability in gem owner

HIGH 8.8
RubyGems

CVE-2019-8324

Code injection in RubyGems

HIGH 7.5
RubyGems

CVE-2019-8321

RubyGems Escape sequence injection vulnerability in verbose

HIGH 7.5
RubyGems

CVE-2019-8325

RubyGems Escape sequence injection in errors

HIGH 7.5
RubyGems

CVE-2017-0900

RubyGems Improper Input Validation vulnerability

CRITICAL 9.8
RubyGems

CVE-2017-0899

RubyGems Code Injection vulnerability

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Free, no credit card | First findings in minutes