Launch Week Day 1: Announcing Security Design Review
rubygems

rubygems-update

View on rubygems registry
25 Total advisories
25 Vulnerabilities
0 Malware

Vulnerabilities

UNKNOWN
RubyGems

CVE-2007-0469

RubyGems file overwrite vulnerability

UNKNOWN
RubyGems

CVE-2012-2125

RubyGems HTTPS to HTTP redirect

UNKNOWN
RubyGems

CVE-2015-4020

RubyGems Improper Input Validation vulnerability

UNKNOWN
RubyGems

CVE-2012-2126

RubyGems does not verify SSL certificate

UNKNOWN
RubyGems

CVE-2015-3900

RubyGems vulnerable to DNS hijack attack

UNKNOWN
RubyGems

CVE-2013-4287

RubyGems Regular Expression Denial of Service vulnerability

UNKNOWN
RubyGems

CVE-2013-4363

RubyGems Regular Expression Denial of Service

MEDIUM 6.1
RubyGems

CVE-2018-1000078

RubyGems Cross-site Scripting vulnerability

HIGH 7.5
RubyGems

CVE-2018-1000075

RubyGems Infinite Loop vulnerability

MEDIUM 5.3
RubyGems

CVE-2018-1000077

RubyGems Improper Input Validation vulnerability

HIGH 7.5
RubyGems

CVE-2018-1000073

RubyGems Link Following vulnerability

HIGH 7.8
RubyGems

CVE-2018-1000074

RubyGems Deserialization of Untrusted Data vulnerability

MEDIUM 5.5
RubyGems

CVE-2018-1000079

RubyGems Path Traversal vulnerability

CRITICAL 9.8
RubyGems

CVE-2018-1000076

RubyGems Improper Verification of Cryptographic Signature vulnerability

CRITICAL 9.8
RubyGems

CVE-2017-0903

RubyGems vulnerable to Deserialization of Untrusted Data

HIGH 8.1
RubyGems

CVE-2017-0902

RubyGems has Origin Validation Error vulnerability

HIGH 7.5
RubyGems

CVE-2017-0901

RubyGems may allow a maliciously crafted gem to overwrite files

HIGH 7.4
RubyGems

CVE-2019-8320

RubyGems Delete directory using symlink when decompressing tar

HIGH 7.5
RubyGems

CVE-2019-8323

RubyGems Escape sequence injection vulnerability in api response handling

HIGH 7.5
RubyGems

CVE-2019-8322

RubyGems Escape sequence injection vulnerability in gem owner

HIGH 8.8
RubyGems

CVE-2019-8324

Code injection in RubyGems

HIGH 7.5
RubyGems

CVE-2019-8321

RubyGems Escape sequence injection vulnerability in verbose

HIGH 7.5
RubyGems

CVE-2019-8325

RubyGems Escape sequence injection in errors

HIGH 7.5
RubyGems

CVE-2017-0900

RubyGems Improper Input Validation vulnerability

CRITICAL 9.8
RubyGems

CVE-2017-0899

RubyGems Code Injection vulnerability

Ready to move

Start Securing

Free, no credit card | First findings in minutes