18351 matches found
MiracleLinux 9 : ruby:3.3 (AXSA:2026-1647:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1647:01 advisory. zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader CVE-2026-27820 net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF...
CVE-2026-79771: Missing Release of Memory after Effective Lifetime
Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling...
PT-2026-85150
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v2fc-qm4h-8hqv. This link is maintained to preserve external references. Original Description Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby...
CVE-2026-44476: Improper Authentication
Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's clientid, which is public information, can authenticate as that client at the token endpoint and obtain an access token without providing its clientsecret. This occu...
MAL-2026-15728 Malicious code in micro-fast-mod (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in micro-fast-mod (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mega-smart-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mega-sharp-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mega-quick-rb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mega-lite-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15710 Malicious code in hyper-sharp-lib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hyper-sharp-box (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hyper-safe-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15707 Malicious code in hyper-safe-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15703 Malicious code in giga-sharp-tool (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in giga-safe-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in giga-pure-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in giga-max-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...