GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby3.3-rails, jruby, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails, logstash...

CVE-2026-47242 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby3.3-rails, jruby, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails, logstash...

GHSA-8P34-64R3-MWG8 vulnerabilities

Vulnerabilities for packages: jruby, kube-logging-operator, logstash-fips, ruby3.3-rails, ruby4.0-rails, logstash, kube-fluentd-operator, truffleruby, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rails, ruby3.4-rails...

CVE-2026-47240 vulnerabilities

Vulnerabilities for packages: jruby, kube-logging-operator, logstash-fips, ruby3.3-rails, ruby4.0-rails, logstash, kube-fluentd-operator, truffleruby, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rails, ruby3.4-rails...

CVE-2026-47242 vulnerabilities

Vulnerabilities for packages: jruby, kube-logging-operator, logstash-fips, ruby3.3-rails, ruby4.0-rails, logstash, kube-fluentd-operator, truffleruby, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rails, ruby3.4-rails...

GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: jruby, kube-logging-operator, logstash-fips, ruby3.3-rails, ruby4.0-rails, logstash, kube-fluentd-operator, truffleruby, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rails, ruby3.4-rails...

CVE-2026-47241 vulnerabilities

Vulnerabilities for packages: jruby, kube-logging-operator, logstash-fips, ruby3.3-rails, ruby4.0-rails, logstash, kube-fluentd-operator, truffleruby, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rails, ruby3.4-rails...

Linux Distros Unpatched Vulnerability : CVE-2026-47167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin...

PT-2026-48707

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0496 Description A code injection issue exists in the s:stepmatch function within the cucumber filetype plugin runtime/ftplugin/cucumber.vim for builds with +ruby support. Step-definition patterns read from .rb files ...

Vim 代码注入漏洞

Vim is an open-source, cross-platform text editor developed by Vim developers. Prior to Vim 9.2.0496, there was a code injection vulnerability in the plugin for the cucumber file type. This vulnerability stemmed from the s:stepmatch function in the plugin, which, in Vim builds that support Ruby,...

Savon::Model evaluates WSDL operation names as Ruby source

Savon::Model generated SOAP operation methods by interpolating operation names into Ruby source passed to moduleeval. An attacker who can control the operation names of a WSDL, can inject Ruby code that executes in the application process. This affects only the .alloperations class method provide...

Security Bulletin: IBM Security Network Intrusion Prevention System can be affected by vulnerabilities in Ruby on Rails (CVE-2012-2660, CVE-2012-2694, CVE-2013-0156, CVE-2012-6496, CVE-2012-3424, and CVE-2012-2695)

Question Is the Network IPS system affected by Ruby on Rails vulnerabilities? "Product":"code":"SS9SBT","label":"Proventia Network Intrusion Prevention System","Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Component":"General...

Open Redirect

Overview oauth is a ruby gem that implements both OAuth clients and servers in Ruby applications. Affected versions of this package are vulnerable to Open Redirect via the tokenrequest function in the token endpoint redirect handling. An attacker can obtain sensitive OAuth request metadata, such ...

Updated ruby-net-ssh packages fix security vulnerabilities

This update fixes CVE-2023-48795: Prefix Truncation Attacks in SSH Specification Terrapin Attack , for ruby-net-ssh...

MGASA-2026-0182 Updated ruby-net-ssh packages fix security vulnerabilities

This update fixes CVE-2023-48795: Prefix Truncation Attacks in SSH Specification Terrapin Attack , for ruby-net-ssh...

MiracleLinux 8 : ruby:3.3 (AXSA:2026-769:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-769:01 advisory. erb: ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 Tenable has extracted the preceding description block directly from the...

Important: ruby4.0

Issue Overview: Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAPstarttls to return "successfully", without starting TLS. This issue has been patched in...

Amazon Linux 2023 : ruby3.4, ruby3.4-bundled-gems, ruby3.4-default-gems (ALAS2023-2026-1807)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1807 advisory. zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader...

Amazon Linux 2023 : ruby4.0, ruby4.0-bundled-gems, ruby4.0-default-gems (ALAS2023-2026-1806)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1806 advisory. Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...