19219 matches found
OESA-2026-2968 rubygem-faraday security update
HTTP/REST API client library Security Fixes: Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. Prior to 2.14.1, Faraday's buildexclusiveurl method in lib/faraday/connection.rb uses Ruby's URImerge to combine the connection's base URL with a...
OESA-2026-2967 rubygem-faraday security update
HTTP/REST API client library Security Fixes: Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. Prior to 2.14.1, Faraday's buildexclusiveurl method in lib/faraday/connection.rb uses Ruby's URImerge to combine the connection's base URL with a...
SUSE CVE-2026-49342
YARD is a documentation generation tool for the Ruby programming language. Prior to version 0.9.44, YARD's static cache lookup reads a request path before the router's path cleanup runs. When a server is configured with a document root, a traversal path such as /../yard-cache-secret.html is joine...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby4.0: ruby4.0-4.0.5-35.hum1 aarch64, x8664 ruby4.0-bundled-gems-4.0.5-35.hum1 aarch64, x8664 ruby4.0-default-gems-4.0.5-35.hum1 noarch ruby4.0-devel-4.0.5-35.hum1 aarch64, x8664...
ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments
A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol IMAP client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful...
RHEL 7 : ruby (RHSA-2026:37397)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:37397 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
RHEL 9 : ruby:3.3 (RHSA-2026:37238)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:37238 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
Important: ruby
Issue Overview: Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAPstarttls to return "successfully", without starting TLS. This issue has been patched in...
Important Photon OS Security Update - PHSA-2026-4.0-1052
Updates of 'python3-pyOpenSSL', 'rubygem-oj', 'rubygem-nokogiri', 'rubygem-concurrent-ruby', 'python3-lxml' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-92-0917
Updates of 'rubygem-oj' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-0917
Updates of 'rubygem-oj' packages of Photon OS have been released...
Amazon Linux 2 : ruby, --advisory ALAS2-2026-3794 (ALAS-2026-3794)
The version of ruby installed on the remote host is prior to 2.0.0.648-36. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3794 advisory. Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14...
Malicious code in zzwandsxabc119 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10000 Malicious code in zztxtwtmp13 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9999 Malicious code in zztxtwtmp12 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9998 Malicious code in zztxtwtmp11 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9997 Malicious code in zztxtwtmp10 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zztxtwtmp08 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...