Malicious code in grpc-web-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38627d9ef2413df056c1a97312ac256a8931cc3a6626adc0c8221b1d8abb65a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ruby-on-rails-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34c450a4a909b2cff0881264fc0cacab1b54bdb89064e08b2c17d897a4cfc2dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in svgo-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 257abcb42a660a670b62862d4d341a46aad586177317711f9ff04dd75be63d62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6371 Malicious code in svgo-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 257abcb42a660a670b62862d4d341a46aad586177317711f9ff04dd75be63d62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6040 Malicious code in setup-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9639a73d85016c08f0bf612f8e7b6892b542d0008e9f9d80539e0afde4bb71ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in setup-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9639a73d85016c08f0bf612f8e7b6892b542d0008e9f9d80539e0afde4bb71ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ruby-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89cf2431bf1e33c39071abae67176324ffcd08f4b09f2abacaac469dd4c41f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5861 Malicious code in ruby-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89cf2431bf1e33c39071abae67176324ffcd08f4b09f2abacaac469dd4c41f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 35 Update: rubygem-jmespath-1.6.1-1.fc35

Implements JMESPath for Ruby...

[SECURITY] Fedora 36 Update: rubygem-jmespath-1.6.1-1.fc36

Implements JMESPath for Ruby...

Critical Photon OS Security Update - PHSA-2022-0199

Updates of 'ruby', 'vim' packages of Photon OS have been released...

EulerOS 2.0 SP5 : ruby (EulerOS-SA-2022-1915)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float...

Important Photon OS Security Update - PHSA-2022-4.0-0199

Updates of 'vim', 'ruby' packages of Photon OS have been released...

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2022-1915)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2108-1 Security update for rubygem-actionpack-5_1, rubygem-activesupport-5_1

This update for rubygem-actionpack-51 and rubygem-activesupport-51 fixes the following issues: - CVE-2021-22904: Fixed possible DoS Vulnerability in Action Controller Token Authentication bsc1185780 - CVE-2022-23633: Fixed possible exposure of information vulnerability in Action Pack bsc1196182...

CVE-2022-31072

Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is...

CVE-2022-31072

Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is...

UBUNTU-CVE-2022-31072

Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is...

CVE-2022-31072

The CVE affects the Ruby Octokit gem; versions 4.23.0 and 4.24.0 ship world-writable files (permissions 0666) instead of 0644, enabling modification by non-owners in affected environments. The root cause is improper packaging of files during these releases. A fix is available in Octokit 4.25.0. W...

CVE-2022-31072 Octokit gem published with world-writable files

Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is...