19159 matches found
CVE-2026-54619
A flaw was found in sqlite3-ruby. When a SQLite function is redefined with a different number of arguments arity, the previously registered function handler is prematurely freed. This can lead to a use-after-free vulnerability, where the program attempts to access memory that has already been...
ronin-exploits
ronin-exploits !CIhttps://github.com/ronin-rb/ronin-explo...
EulerOS 2.0 SP15 : ruby (EulerOS-SA-2026-2908)
According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ERB is a templating system for Ruby. Ruby 2.7.0 before ERB 2.2.0 was published on rubygems.org introduced an @init instance variable guard in...
EulerOS 2.0 SP15 : ruby (EulerOS-SA-2026-2949)
According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ERB is a templating system for Ruby. Ruby 2.7.0 before ERB 2.2.0 was published on rubygems.org introduced an @init instance variable guard in...
CVE-2026-63263 vulnerabilities
Vulnerabilities for packages: ruby3.4-elasticsearch, ruby3.3-elasticsearch, ruby4.0-elasticsearch, ruby3.2-elasticsearch...
GHSA-5V5G-HVW6-X2X7 vulnerabilities
Vulnerabilities for packages: ruby3.4-elasticsearch, ruby3.3-elasticsearch, ruby4.0-elasticsearch, ruby3.2-elasticsearch...
GHSA-727X-48VV-8CJ7 vulnerabilities
Vulnerabilities for packages: ruby3.4-elasticsearch, ruby3.3-elasticsearch, ruby4.0-elasticsearch, ruby3.2-elasticsearch...
CVE-2026-63144 vulnerabilities
Vulnerabilities for packages: ruby3.4-elasticsearch, ruby3.3-elasticsearch, ruby4.0-elasticsearch, ruby3.2-elasticsearch...
GHSA-H663-9FGH-W7XF vulnerabilities
Vulnerabilities for packages: ruby3.4-elasticsearch, ruby3.3-elasticsearch, ruby4.0-elasticsearch, ruby3.2-elasticsearch...
CVE-2026-54522 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...
GHSA-4MRV-5P47-P938 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...
GHSA-5V5G-HVW6-X2X7 vulnerabilities
Vulnerabilities for packages: ruby3.4-elasticsearch, ruby3.3-elasticsearch, ruby3.2-elasticsearch, ruby4.0-elasticsearch...
CVE-2026-56144 vulnerabilities
Vulnerabilities for packages: ruby3.4-elasticsearch, ruby3.3-elasticsearch, ruby3.2-elasticsearch, ruby4.0-elasticsearch...
CVE-2026-63263 vulnerabilities
Vulnerabilities for packages: ruby3.4-elasticsearch, ruby3.3-elasticsearch, ruby3.2-elasticsearch, ruby4.0-elasticsearch...
CVE-2026-56145 vulnerabilities
Vulnerabilities for packages: ruby3.4-elasticsearch, ruby3.3-elasticsearch, ruby3.2-elasticsearch, ruby4.0-elasticsearch...
CVE-2026-63144 vulnerabilities
Vulnerabilities for packages: ruby3.4-elasticsearch, ruby3.3-elasticsearch, ruby3.2-elasticsearch, ruby4.0-elasticsearch...
GHSA-9FHM-53XW-H9C3 vulnerabilities
Vulnerabilities for packages: ruby3.4-elasticsearch, ruby3.3-elasticsearch, ruby3.2-elasticsearch, ruby4.0-elasticsearch...
GHSA-4MRV-5P47-P938 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips...
net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input
A flaw was found in Net::IMAP, a Ruby client library for the Internet Message Access Protocol IMAP. This vulnerability allows a remote attacker to cause a denial of service by sending specially crafted input to certain Net::IMAP commands. When a raw string argument, derived from user-controlled...
ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication
A flaw was found in Net::IMAP, a Ruby library for Internet Message Access Protocol IMAP client functionality. A hostile server can exploit this vulnerability during SCRAM-SHA1 or SCRAM-SHA256 Salted Challenge Response Authentication Mechanism - Secure Hash Algorithm 1 or 256 authentication by...