744 matches found
OESA-2024-2490 rubygem-sinatra security update
Sinatra is a DSL intended for quickly creating web-applications in Ruby with minimal effort. Security Fixes: Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a...
ruby3.3-rubygem-rails-7.0-7.0.8.6-1.1 on GA media (moderate)
ruby3.3-rubygem-rails-7.0-7.0.8.6-1.1 on GA media Announcement ID: openSUSE-SU-2024:14479-1 Rating: moderate Cross-References: CVE-2024-41128 CVE-2024-47887 CVE-2024-47888 CVE-2024-47889 CVSS scores: CVE-2024-41128 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-47887 SUSE : 5.9...
ruby3.3-rubygem-actionmailer-7.0-7.0.8.6-1.1 on GA media (moderate)
ruby3.3-rubygem-actionmailer-7.0-7.0.8.6-1.1 on GA media Announcement ID: openSUSE-SU-2024:14471-1 Rating: moderate Cross-References: CVE-2024-47889 CVSS scores: CVE-2024-47889 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one...
OESA-2024-2226 rubygem-webrick security update
WEBrick is an HTTP server toolkit that can be configured as an HTTPS server, a proxy server, and a virtual-host server. Security Fixes: An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a...
Ruby Gem Modules Installed (Windows)
Binary data rubymoduleswininstalled.nbin...
Ruby Gem Modules Installed (Linux)
Binary data rubymodulesnixinstalled.nbin...
rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>
A vulnerability was found in REXML, an XML toolkit used for Ruby. When parsing an untrusted XML with many specific characters, the REXML gem may take a long time, leading to a denial of service condition. Some of these special characters include the whitespace character, '', and ''...
rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>
A vulnerability was found in REXML, an XML toolkit used for Ruby. When parsing an untrusted XML with many specific characters, the REXML gem may take a long time, leading to a denial of service condition. Some of these special characters include the whitespace character, '', and ''...
RHSA-2019:1147 Red Hat Security Advisory: rh-ror50-rubygem-actionpack security update
Bulletin has no description...
RHSA-2018:2244 Red Hat Security Advisory: rh-ror42-rubygem-sprockets security update
Bulletin has no description...
RHSA-2016:1858 Red Hat Security Advisory: ruby193-rubygem-actionpack security update
Bulletin has no description...
RHSA-2016:1857 Red Hat Security Advisory: ror40-rubygem-actionpack security update
Bulletin has no description...
RHSA-2016:1856 Red Hat Security Advisory: rh-ror41-rubygem-actionview security update
Bulletin has no description...
RHSA-2014:0764 Red Hat Security Advisory: rubygem-openshift-origin-node security update
Bulletin has no description...
AZL-47376 CVE-2024-41946 affecting package rubygem-rexml for versions less than 3.3.4-1
REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability...
DEBIAN-CVE-2024-41123
REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, and . The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities...
OESA-2024-1779 rubygem-actionpack security update
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling easy unit/integration testing that doesn't require a browser. Security Fixes: Action Pack is a framework for handling and responding to web requests. Und...
Malicious code in telegram_bot-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...