CVE-2026-31860

Unhead is a document head and template manager. Prior to 2.1.11, useHeadSafe can be bypassed to inject arbitrary HTML attributes, including event handlers, into SSR-rendered...

SUSE CVE-2013-2065

1 DL and 2 Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent attackers to bypass intended $SAFE level restrictions...

PT-2017-2568

Name of the Vulnerable Software and Affected Versions Ruby versions 2.4.1 Description The issue is related to a buffer overflow in the parser yyerror function of the UTF-8 parser in the Ruby interpreter. This can be exploited by a remote attacker using a specially crafted Ruby script that interac...