GHSA-Q2GM-54R6-8FWM vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset...

GHSA-2J26-FRM8-CMJ9 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, cinc-auditor, gitlab-rails-ce, ruby3.2-rails, kube-logging-operator, kube-fluentd-operator...

GHSA-R46P-8F7G-VVVG vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce...

CVE-2026-33169 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, cinc-auditor, gitlab-rails-ce, ruby3.2-rails, kube-logging-operator, kube-fluentd-operator...

GHSA-PGM4-439C-5JP6 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails...

CVE-2026-33168 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails...

CVE-2026-33195 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce...

CVE-2025-61780 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, gitlab-rails-ce, ruby3.3-rails, ruby3.4-rack, ruby3.2-rack, logstash, ruby4.0-rack, kube-fluentd-operator, ruby3.3-rack...

EUVD-2024-0516

Malicious code in bioql PyPI...

EUVD-2024-0663

Malicious code in bioql PyPI...

EUVD-2024-3162

Malicious code in bioql PyPI...

EUVD-2024-3142

Malicious code in bioql PyPI...

EUVD-2024-3158

Malicious code in bioql PyPI...

EUVD-2024-3051

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-27281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When parsing .rdocoptions used for configuration in RDoc as a YAM...

Linux Distros Unpatched Vulnerability : CVE-2024-26142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rails is a web-application framework. Starting in version 7.1.0, there is a possible ReDoS vulnerability in the Accept header parsing routines of Action Dispatc...

BIT-RAILS-2024-47889 Action Mailer has possible ReDoS vulnerability in block_format

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

BIT-RAILS-2024-47888 Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node

Action Text brings rich text content and editing to Rails. Starting in version 6.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the plaintextforblockquotenode helper in Action Text. Carefully crafted text can cause the...

BIT-RAILS-2024-47887 Action Controller has possible ReDoS vulnerability in HTTP Token authentication

Action Pack is a framework for handling and responding to web requests. Starting in version 4.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in Action Controller's HTTP Token authentication. For applications using HTTP Token authenticatio...

BIT-RAILS-2024-41128 Action Dispatch has possible ReDoS vulnerability in query parameter filtering

Action Pack is a framework for handling and responding to web requests. Starting in version 3.1.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the query parameter filtering routines of Action Dispatch. Carefully crafted query parameters...