Astra Linux – Vulnerability in JRuby

A vulnerability was discovered in Ruby versions 2.5.8, 2.6.x up to 2.6.6, and 2.7.x up to 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, did not rigorously check the transfer-encoding header value. An attacker could potentially exploit this vulnerability to bypass a reverse proxy which...

CVE-2020-15169

README यह README सामान्यतः उन सभी चरणों का दस्तावेज़ीकरण करेगा जो एप्लिकेशन को चालू और चलाने के लिए आवश्यक हैं। कुछ चीज़ें जिन्हें आप शामिल कर सकते हैं: रूबी संस्करण सिस्टम निर्भरताएँ कॉन्फ़िगरेशन डेटाबेस निर्माण डेटाबेस आरंभीकरण टेस्ट सूट कैसे चलाएँ सेवाएँ जॉब कतारें, कैश सर्वर, सर्च इंजन, आदि...

MAL-2026-17585 Malicious code in bitcoij-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcoij-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

Malicious code in bitcoij-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcoij-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

MAL-2026-17610 Malicious code in solaan-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/solaan-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minute...

Malicious code in solaan-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/solaan-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minute...

Malicious code in bitcion-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcion-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

MAL-2026-17584 Malicious code in bitcion-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcion-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

Malicious code in bitciin (RubyGems)

RubyGems runs this gem's native extension script ext/bitciin/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes an...

Malicious code in bitcoin-rpc-lite (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17595 Malicious code in crypto-mnemonic-tools (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

CVE-2023-31606

CVE-2023-31606 भेद्यता रेडक्लॉथ जेम = v4.0.0 के sanitizehtml फ़ंक्शन में एक रेगुलर एक्सप्रेशन डिनायल ऑफ सर्विस ReDoS समस्या पाई गई। यह भेद्यता हमलावरों को एक तैयार पेलोड प्रदान करके सेवा से वंचित DoS करने की अनुमति देती है। ReDoS क्या है? OWASP के अनुसार - रेगुलर एक्सप्रेशन डिनायल ऑफ सर्विस ReDoS...

K000163534: Ruby vulnerabilities CVE-2026-42245, CVE-2026-42246, CVE-2026-42257

Security Advisory Description CVE-2026-42245 Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has quadratic time complexity when reading large responses containing many string literals. ...

The vulnerability of the client API library for the IMAP protocol, written in Ruby, arises from the lack of data cleansing measures at the management level. This allows attackers to execute arbitrary commands.

The vulnerability of the client API library for the IMAP protocol, written in Ruby, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

The vulnerability of the client API library for the IMAP protocol, written in Ruby, arises from incorrect filtering of input data. This allows attackers to trigger a service failure.

The vulnerability of the client API library for the IMAP protocol, written in Ruby, is related to incorrect filtering of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the client API library for the IMAP protocol, written in Ruby, arises from the lack of data cleansing measures at the management level. This allows attackers to execute arbitrary commands.

The vulnerability of the client API library for the IMAP protocol, written in Ruby, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

CVE-2026-94656

Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

Debian dla-4822 : ruby-oauth2 - security update

The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4822 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4822-1 [email protected] https://www.debian.org/lts/security/...

AlmaLinux 10 : ruby (ALSA-2026:72785)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:72785 advisory. resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses CVE-2026-80212 Tenable has extracted the preceding description...

CVE-2026-96277

Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...