MEDIUMRubyGems
GHSA-228f-g3h7-3fj3· CVE-2012-2125RubyGems HTTPS to HTTP redirect
Modified: 12/2/2024
package
RubyGems/rubygems-update
pkg:rubygems/rubygems-update
HIGH7.5RubyGems
GHSA-3h4r-pjv6-cph9· CVE-2019-8323RubyGems Escape sequence injection vulnerability in api response handling
Modified: 2/16/2024
HIGH7.5RubyGems
GHSA-4wm8-fjv7-j774· CVE-2019-8325RubyGems Escape sequence injection in errors
Modified: 2/16/2024
MEDIUMRubyGems
GHSA-5mgj-mvv8-46mw· CVE-2012-2126RubyGems does not verify SSL certificate
Modified: 12/2/2024
HIGH7.4RubyGems
GHSA-5x32-c9mf-49cc· CVE-2019-8320RubyGems Delete directory using symlink when decompressing tar
Modified: 2/16/2024
HIGH8.1RubyGems
GHSA-73w7-6w9g-gc8w· CVE-2017-0902RubyGems has Origin Validation Error vulnerability
Modified: 2/22/2024
HIGH8.8RubyGems
GHSA-76wm-422q-92mq· CVE-2019-8324Code injection in RubyGems
Modified: 2/16/2024
CRITICAL9.8RubyGems
GHSA-7gcp-2gmq-w3xh· CVE-2017-0899RubyGems Code Injection vulnerability
Modified: 11/8/2023
MEDIUMRubyGems
GHSA-95vx-q4c2-64gr· CVE-2007-0469RubyGems file overwrite vulnerability
Modified: 4/9/2025
MEDIUMRubyGems
GHSA-9j7m-rjqx-48vh· CVE-2013-4287RubyGems Regular Expression Denial of Service vulnerability
Modified: 11/29/2024
MEDIUMRubyGems
GHSA-9qvm-2vhf-q649· CVE-2013-4363RubyGems Regular Expression Denial of Service
Modified: 11/29/2024
HIGH7.5RubyGems
GHSA-fr32-gr5c-xq5c· CVE-2019-8321RubyGems Escape sequence injection vulnerability in verbose
Modified: 2/16/2024
HIGH7.5RubyGems
GHSA-mh37-8c3g-3fgc· CVE-2019-8322RubyGems Escape sequence injection vulnerability in gem owner
Modified: 2/16/2024
CRITICAL9.8RubyGems
GHSA-mqwr-4qf2-2hcv· CVE-2017-0903RubyGems vulnerable to Deserialization of Untrusted Data
Modified: 2/22/2024
HIGH7.5RubyGems
GHSA-p7f2-rr42-m9xm· CVE-2017-0900RubyGems Improper Input Validation vulnerability
Modified: 11/8/2023
HIGH7.5RubyGems
GHSA-pm9x-4392-2c2p· CVE-2017-0901RubyGems may allow a maliciously crafted gem to overwrite files
Modified: 2/22/2024
MEDIUMRubyGems
GHSA-qv62-xfj6-32xm· CVE-2015-4020RubyGems Improper Input Validation vulnerability
Modified: 12/2/2024
HIGHRubyGems
GHSA-wp3j-rvfp-624h· CVE-2015-3900RubyGems vulnerable to DNS hijack attack
Modified: 11/30/2024
HIGH7.5RubyGemsMaven
GHSA-74pv-v9gh-h25p· CVE-2018-1000075RubyGems Infinite Loop vulnerability
Modified: 3/13/2024
MEDIUM6.1RubyGemsMaven
GHSA-87qx-g5wg-mwmj· CVE-2018-1000078RubyGems Cross-site Scripting vulnerability
Modified: 3/13/2024
MEDIUM5.5RubyGemsMaven
GHSA-8qxg-mff5-j3wc· CVE-2018-1000079RubyGems Path Traversal vulnerability
Modified: 3/12/2024
MEDIUM5.3RubyGemsMaven
GHSA-gv86-43rv-79m2· CVE-2018-1000077RubyGems Improper Input Validation vulnerability
Modified: 3/12/2024
HIGH7.5RubyGemsMaven
GHSA-gx69-6cp4-hxrj· CVE-2018-1000073RubyGems Link Following vulnerability
Modified: 3/12/2024
CRITICAL9.8RubyGemsMaven
GHSA-mc6j-h948-v2p6· CVE-2018-1000076RubyGems Improper Verification of Cryptographic Signature vulnerability
Modified: 3/11/2024
HIGH7.8RubyGemsMaven
GHSA-qj2w-mw2r-pv39· CVE-2018-1000074RubyGems Deserialization of Untrusted Data vulnerability
Modified: 3/12/2024