Dependency scanning
Check whether rubygems-update is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
CVE-2007-0469
RubyGems file overwrite vulnerability
CVE-2012-2125
RubyGems HTTPS to HTTP redirect
CVE-2015-4020
RubyGems Improper Input Validation vulnerability
CVE-2012-2126
RubyGems does not verify SSL certificate
CVE-2015-3900
RubyGems vulnerable to DNS hijack attack
CVE-2013-4287
RubyGems Regular Expression Denial of Service vulnerability
CVE-2013-4363
RubyGems Regular Expression Denial of Service
CVE-2018-1000078
RubyGems Cross-site Scripting vulnerability
CVE-2018-1000075
RubyGems Infinite Loop vulnerability
CVE-2018-1000077
RubyGems Improper Input Validation vulnerability
CVE-2018-1000073
RubyGems Link Following vulnerability
CVE-2018-1000074
RubyGems Deserialization of Untrusted Data vulnerability
CVE-2018-1000079
RubyGems Path Traversal vulnerability
CVE-2018-1000076
RubyGems Improper Verification of Cryptographic Signature vulnerability
CVE-2017-0903
RubyGems vulnerable to Deserialization of Untrusted Data
CVE-2017-0902
RubyGems has Origin Validation Error vulnerability
CVE-2017-0901
RubyGems may allow a maliciously crafted gem to overwrite files
CVE-2019-8320
RubyGems Delete directory using symlink when decompressing tar
CVE-2019-8323
RubyGems Escape sequence injection vulnerability in api response handling
CVE-2019-8322
RubyGems Escape sequence injection vulnerability in gem owner
CVE-2019-8324
Code injection in RubyGems
CVE-2019-8321
RubyGems Escape sequence injection vulnerability in verbose
CVE-2019-8325
RubyGems Escape sequence injection in errors
CVE-2017-0900
RubyGems Improper Input Validation vulnerability
CVE-2017-0899
RubyGems Code Injection vulnerability
Browse more RubyGems advisories
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes