EUVD-2022-3325

Malicious code in bioql PyPI...

CVE-2017-14506

geminabox aka Gem in a Box before 0.13.6 has XSS, as demonstrated by uploading a gem file that has a crafted gem.homepage value in its .gemspec file...

PT-2017-13492

Name of the Vulnerable Software and Affected Versions geminabox versions prior to 0.13.6 Description The issue allows for Cross-site Scripting XSS attacks. This can be demonstrated by uploading a gem file with a crafted gem.homepage value in its .gemspec file. Recommendations For versions prior t...

CVE-2017-14506: Improper Neutralization of Input During Web Page Generation

geminabox aka Gem in a Box before 0.13.6 has XSS, as demonstrated by uploading a gem file that has a crafted gem.homepage value in its .gemspec file...