Use of Externally-Controlled Format String

Overview json is a JSON implementation as a Ruby extension in C. Affected versions of this package are vulnerable to Use of Externally-Controlled Format String in JSON.parsedoc, allowduplicatekey: false. An attacker can cause denial of service or disclose sensitive information via malicious forma...

Ruby JSON has a format string injection vulnerability

Impact A format string injection vulnerability than that lead to denial of service attacks or information disclosure, when the allowduplicatekey: false parsing option is used to parse user supplied documents. This option isn't the default, if you didn't opt-in to use it, you are not impacted...

MAL-2026-1924 Malicious code in testcatplzignore (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sq-minimal-feature-flags (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-1923 Malicious code in sq-minimal-feature-flags (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in resolvrtest (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in rails_structured_logging (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-1920 Malicious code in rails_structured_logging (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in newlogger (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in kaleido (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-1917 Malicious code in kaleido (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in freshworks-ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-1916 Malicious code in freshworks-ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-1915 Malicious code in doctolib (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

OpenProject SQL注入漏洞

OpenProject is an open-source web-based project management software. Versions of OpenProject prior to 16.6.9, 17.0.6, 17.1.3, and 17.2.1 have a SQL injection vulnerability. This vulnerability arises from custom field names not being properly cleaned in SQL queries, which can allow SQL injection...

ruby4.0-rubygem-sprockets-4.2.1-1.9 on GA media (moderate)

ruby4.0-rubygem-sprockets-4.2.1-1.9 on GA media Announcement ID: openSUSE-SU-2026:10364-1 Rating: moderate Cross-References: CVE-2018-3760 CVSS scores: CVE-2018-3760 SUSE : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

ruby4.0-rubygem-web-console-4.2.1-1.9 on GA media (moderate)

ruby4.0-rubygem-web-console-4.2.1-1.9 on GA media Announcement ID: openSUSE-SU-2026:10367-1 Rating: moderate Cross-References: CVE-2015-3224 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

ruby4.0-rubygem-websocket-extensions-0.1.5-1.24 on GA media (moderate)

ruby4.0-rubygem-websocket-extensions-0.1.5-1.24 on GA media Announcement ID: openSUSE-SU-2026:10368-1 Rating: moderate Cross-References: CVE-2020-7663 CVSS scores: CVE-2020-7663 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves on...

ruby4.0-rubygem-puma-6.4.3-1.5 on GA media (moderate)

ruby4.0-rubygem-puma-6.4.3-1.5 on GA media Announcement ID: openSUSE-SU-2026:10357-1 Rating: moderate Cross-References: CVE-2019-16770 CVE-2020-11076 CVE-2022-23634 CVE-2024-45614 CVSS scores: CVE-2019-16770 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-11076 SUSE : 6.8...

ruby4.0-rubygem-minitar-0.9-1.21 on GA media (moderate)

ruby4.0-rubygem-minitar-0.9-1.21 on GA media Announcement ID: openSUSE-SU-2026:10354-1 Rating: moderate Cross-References: CVE-2016-10173 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...