MAL-2025-192912 Malicious code in prometheus_client_ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192911 Malicious code in md_confluence (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192910 Malicious code in macklemore (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192908 Malicious code in hola_rreichel3github (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hola_rreichel3github (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192907 Malicious code in hockeystick (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in cocoapod (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192904 Malicious code in cocoapod (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chalk-thrift (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chalk-interface (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chalk-sentry (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chalk-henson (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192896 Malicious code in chalk-cli (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chalk-cli (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in activestorage-redundancy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192894 Malicious code in activestorage-redundancy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pg_result_init (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 007d07edb120233aab0539e4646e8b634d2a95e2df9e6179bb9b2b6eb90f5a97 The OpenSSF Package Analysis project identified 'pgresultinit' @ 2.0.9 rubygems as malicious. It is considered malicious because: - The package...

EUVD-2025-200264

Malicious code in pgresultinit RubyGems...

MAL-2025-191667 Malicious code in pg_result_init (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 007d07edb120233aab0539e4646e8b634d2a95e2df9e6179bb9b2b6eb90f5a97 The OpenSSF Package Analysis project identified 'pgresultinit' @ 2.0.9 rubygems as malicious. It is considered malicious because: - The package...

rack: Rack memory exhaustion denial of service

A denial of service flaw has been found in the rubygems rack package. Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line CRLFCRLF. The parser keeps appending incoming bytes to memory without a size cap, allowing...