4630 matches found
CVE-2025-61780 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rack, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack...
GHSA-R657-RXJC-J557 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rack, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack...
CVE-2025-61919 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rack, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack...
GHSA-6XW4-3V39-52MM vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rack, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack...
GHSA-R657-RXJC-J557 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, ruby3.4-rails, logstash, ruby3.3-rack, ruby3.3-rails, ruby3.4-rack, kube-fluentd-operator, ruby3.2-rails, ruby4.0-rack, ruby3.2-rack...
CVE-2025-61780 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, ruby3.4-rails, logstash, ruby3.3-rack, ruby3.3-rails, ruby3.4-rack, kube-fluentd-operator, ruby3.2-rails, ruby4.0-rack, ruby3.2-rack...
CVE-2025-61919 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, ruby3.4-rails, logstash, ruby3.3-rack, ruby3.3-rails, ruby3.4-rack, kube-fluentd-operator, ruby3.2-rails, ruby4.0-rack, ruby3.2-rack...
GHSA-6XW4-3V39-52MM vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, ruby3.4-rails, logstash, ruby3.3-rack, ruby3.3-rails, ruby3.4-rack, kube-fluentd-operator, ruby3.2-rails, ruby4.0-rack, ruby3.2-rack...
DEBIAN-CVE-2025-61780
Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, a possible information disclosure vulnerability existed in Rack::Sendfile when running behind a proxy that supports x-sendfile headers such as Nginx. Specially crafted headers could cause Rack::Sendfile to...
CVE-2025-61770 vulnerabilities
Vulnerabilities for packages: ruby3.2-rack, gitlab-cng, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack...
CVE-2025-61771 vulnerabilities
Vulnerabilities for packages: ruby3.2-rack, gitlab-cng, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack...
CVE-2025-61772 vulnerabilities
Vulnerabilities for packages: ruby3.2-rack, gitlab-cng, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack...
GHSA-WPV5-97WM-HP9C vulnerabilities
Vulnerabilities for packages: ruby3.2-rack, gitlab-cng, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack...
GHSA-P543-XPFM-54CP vulnerabilities
Vulnerabilities for packages: ruby3.2-rack, gitlab-cng, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack...
Fedora 44 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2025-6e5c27d218)
The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-6e5c27d218 advisory. Update to Ruby on Rails 8.0.3 Fix CVE-2025-24293: Active Storage allowed transformation methods potentially unsafe Fix CVE-2025-55193: ANSI escape...
Malicious code in rails-html-sanitizer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6639c0a00dd79a8b017f59289f23eccd33625402399ac79c43d96fdb92e3b373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rails-dom-testing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c71a0792e9dc0f14b43ce18d9e3c77d91946237916717b87a53222fb8fec287a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-32970
Malicious code in rails-html-sanitizer npm...
MAL-2025-48039 Malicious code in rails-dom-testing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c71a0792e9dc0f14b43ce18d9e3c77d91946237916717b87a53222fb8fec287a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview rails-html-sanitizer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...