MAL-2025-192910 Malicious code in macklemore (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hola_rreichel3github (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192908 Malicious code in hola_rreichel3github (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192907 Malicious code in hockeystick (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in cocoapod (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192904 Malicious code in cocoapod (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chalk-thrift (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chalk-interface (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chalk-sentry (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chalk-henson (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chalk-cli (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192896 Malicious code in chalk-cli (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in activestorage-redundancy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192894 Malicious code in activestorage-redundancy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pg_result_init (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 007d07edb120233aab0539e4646e8b634d2a95e2df9e6179bb9b2b6eb90f5a97 The OpenSSF Package Analysis project identified 'pgresultinit' @ 2.0.9 rubygems as malicious. It is considered malicious because: - The package...

EUVD-2025-200264

Malicious code in pgresultinit RubyGems...

MAL-2025-191667 Malicious code in pg_result_init (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 007d07edb120233aab0539e4646e8b634d2a95e2df9e6179bb9b2b6eb90f5a97 The OpenSSF Package Analysis project identified 'pgresultinit' @ 2.0.9 rubygems as malicious. It is considered malicious because: - The package...

rack: Rack memory exhaustion denial of service

A denial of service flaw has been found in the rubygems rack package. Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line CRLFCRLF. The parser keeps appending incoming bytes to memory without a size cap, allowing...

geminabox

It is an offensive tool for RubyGem hosting. The repository contains a simple RubyGem hosting system called Gem in a Box. It allows users to host their own RubyGems, and it includes features such as user authentication, gem versioning, and a web interface for browsing and downloading gems. The to...

USN-7747-1: RubyGems vulnerability

It was discovered that RubyGems incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause RubyGems to consume resources, leading to a regular expression denial of service ReDoS...