836 matches found
NULL Pointer Dereference
Amendment This was deemed not a vulnerability. Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to NULL Pointer Dereference via the XML Schema processing in the packaged libxml2 library. An attacker can cause a segmentation fault...
Out-of-bounds Read
Amendment This was deemed not a vulnerability. Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Out-of-bounds Read via the xmlSchemaIDCFillNodeTables function. An attacker can cause a denial of service by submitting specially...
Malicious code in mega-lite-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in giga-max-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15694 Malicious code in circle-w3s (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Important: Red Hat Security Advisory: Satellite 6.17.10 Async Update
A new release is now available for Red Hat Satellite 6.17 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
RHEL 9 : Satellite 6.19.3 Async Update (Important) (RHSA-2026:50221)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:50221 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity t...
AZL-94449 CVE-2026-54522 affecting package rubygem-msgpack for versions less than 1.8.4-1
MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::Bufferclear in ext/msgpack/buffer.c leaves rmemlast, rmemend, and rmemowner stale after msgpackbuffershiftchunk returns an rmem page to the shared pool, allowing a subsequent...
CVE-2026-54659
Pagy is agnostic pagination in plain Ruby. From 43.0.0 until 43.5.6, Pagy::I18n.locale= in gem/lib/pagy/modules/i18n/i18n.rb stored locale values verbatim and later used them as .yml path components, allowing untrusted params:locale values with absolute paths or ../ sequences to create a file...
Infinite loop
Overview thrift is a Ruby bindings package for Apache Thrift. Affected versions of this package are vulnerable to Infinite loop in TCompactProtocol varint decoding, which reads continuation bytes without enforcing a maximum byte count. An attacker can hang the process deserializing a message by...
Critical Photon OS Security Update - PHSA-2026-5.0-0927
Updates of 'rubygem-fluentd' packages of Photon OS have been released...
MAL-2026-10914 Malicious code in my_shoaib_gem (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Important Photon OS Security Update - PHSA-2026-5.0-0917
Updates of 'rubygem-oj' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-92-0917
Updates of 'rubygem-oj' packages of Photon OS have been released...
MAL-2026-9676 Malicious code in zpx52500is (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9604 Malicious code in zjina1 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9191 Malicious code in wanddbbehg03 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wandcaluzys1778552233 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...