19095 matches found
ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification
A flaw was found in ruby-jwt, a Ruby implementation of the RFC 7519 OAuth JSON Web Token JWT standard. A remote attacker can exploit this vulnerability by crafting a malicious token that is accepted due to an empty key being used in the HMAC Hash-based Message Authentication Code digest calculati...
Important: Red Hat Security Advisory: Satellite 6.17.11 Async Update
A new release is now available for Red Hat Satellite 6.17 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification
A flaw was found in ruby-jwt, a Ruby implementation of the RFC 7519 OAuth JSON Web Token JWT standard. A remote attacker can exploit this vulnerability by crafting a malicious token that is accepted due to an empty key being used in the HMAC Hash-based Message Authentication Code digest calculati...
ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification
A flaw was found in ruby-jwt, a Ruby implementation of the RFC 7519 OAuth JSON Web Token JWT standard. A remote attacker can exploit this vulnerability by crafting a malicious token that is accepted due to an empty key being used in the HMAC Hash-based Message Authentication Code digest calculati...
GHSA-XQQH-3W52-Q8P7 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.4-rails, ruby3.3-rails, ruby3.2-rails...
CVE-2026-79772 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.4-rails, ruby3.3-rails, ruby3.2-rails...
CVE-2026-79771 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.2-rails, pact-broker-docker, kube-logging-operator, gitlab-rails-ce, pact-broker-docker-fips, gitlab-rails-ce-fips, ruby3.4-rails, ruby3.3-rails...
CVE-2026-79770 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.2-rails, pact-broker-docker, kube-logging-operator, gitlab-rails-ce, pact-broker-docker-fips, gitlab-rails-ce-fips, ruby3.4-rails, ruby3.3-rails...
GHSA-RH9X-7XJC-VWX2 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.2-rails, pact-broker-docker, kube-logging-operator, gitlab-rails-ce, pact-broker-docker-fips, gitlab-rails-ce-fips, ruby3.4-rails, ruby3.3-rails...
GHSA-XQQH-3W52-Q8P7 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.4-rails, ruby3.3-rails, ruby3.2-rails...
CVE-2026-79772 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.4-rails, ruby3.3-rails, ruby3.2-rails...
GHSA-RH9X-7XJC-VWX2 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, kube-logging-operator, ruby3.4-rails, ruby3.3-rails, ruby4.0-rails...
CVE-2026-79770 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, kube-logging-operator, ruby3.4-rails, ruby3.3-rails, ruby4.0-rails...
CVE-2026-79771 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, kube-logging-operator, ruby3.4-rails, ruby3.3-rails, ruby4.0-rails...
GHSA-5JHF-FPP7-V2PV vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, kube-logging-operator, ruby3.4-rails, ruby3.3-rails, ruby4.0-rails...
AZL-99087 CVE-2026-85396 affecting package rubygem-rubyzip 2.3.2-1
rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entryextract that fails to properly validate extraction paths using prefix comparison without trailing separators. Attackers can craft archive entries with names like ../uploadbackup/owned.sh to write files outside the...
Linux Distros Unpatched Vulnerability : CVE-2026-63435
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and...
EUVD-2026-69609
Mail: Email address spoofing via malformed RFC 2047 encoded-words...
