94 matches found
CVE-2026-79771 vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, ruby4.0-rails, kube-logging-operator, ruby3.2-rails, ruby3.4-rails...
AlmaLinux 10 : ruby (ALSA-2026:33565)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:33565 advisory. ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses CVE-2026-42245 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol...
Amazon Linux 2023 : ruby4.0, ruby4.0-bundled-gems, ruby4.0-default-gems (ALAS2023-2026-1806)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1806 advisory. Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause...
CVE-2026-41316 vulnerabilities
Vulnerabilities for packages: jruby, ruby3.4-rails, logstash-fips, ruby, ruby3.3-rails, ruby3.2-rails, truffleruby, ruby4.0-rails, logstash...
Critical Photon OS Security Update - PHSA-2026-4.0-0976
Updates of 'ruby', 'ImageMagick' packages of Photon OS have been released...
MiracleLinux 7 : rh-ruby30-ruby-3.0.2-148.el7 (AXSA:2021-2500:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2500:01 advisory. rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source CVE-2020-36327 rubygem-rdoc: Command injection...
CVE-2025-61594 vulnerabilities
Vulnerabilities for packages: jruby, ruby...
GHSA-J4PR-3WM6-XX2R vulnerabilities
Vulnerabilities for packages: jruby, ruby...
GHSA-J4PR-3WM6-XX2R vulnerabilities
Vulnerabilities for packages: jruby, truffleruby, logstash, ruby...
Critical Photon OS Security Update - PHSA-2025-4.0-0903
Updates of 'polkit', 'rubygem-yajl-ruby', 'curl', 'lasso' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2025-5.0-0672
Updates of 'unbound', 'git-lfs', 'vim', 'ruby', 'libarchive', 'glib' packages of Photon OS have been released...
EUVD-2020-1442
Malware in sbrugna...
GHSA-353F-X4GH-CQQ8 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, ruby3.3-rails, ruby3.2-rails, gitlab-rails-ce, logstash...
CVE-2025-24294 vulnerabilities
Vulnerabilities for packages: jruby, ruby...
CVE-2025-24294 vulnerabilities
Vulnerabilities for packages: jruby, truffleruby, ruby...
Oracle Linux 8 : ruby:3.3 (ELSA-2025-10217)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10217 advisory. - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. CVE-2025-25186 - Fix Denial of Service in CGI::Cookie.parse. CVE-2025-27219 - Fix...
RHEL 8 : ruby:3.3 (RHSA-2025:10217)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10217 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
RHEL 10 : ruby (RHSA-2025:8131)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8131 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks
Several malicious packages have been uncovered across the npm, Python, and Ruby package repositories that drain funds from cryptocurrency wallets, erase entire codebases after installation, and exfiltrate Telegram API tokens, once again demonstrating the variety of supply chain threats lurking in...