GHSA-27P8-2357-5QQV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

Malicious code in tiny-sharp-pkg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in super-quick-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in micro-max-mod (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hyper-sharp-box (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Photon OS 5.0: Ruby PHSA-2026-5.0-91-0882

An update of the ruby package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0882. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 44 : ruby (2026-32d5a3d450)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-32d5a3d450 advisory. Ruby 4.0.6 is released. This new ruby contains several security fixes in net-snmp. Tenable has extracted the preceding description block directly fr...

Fedora 45 : ruby (2026-7f499e0362)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7f499e0362 advisory. Ruby 4.0.6 is released. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Malicious code in zwxbcstan (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-9260 Malicious code in wandsdock7wre22fossil (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-9164 Malicious code in wandczvof2hg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8545 Malicious code in rubydocmeta1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8324 Malicious code in oaiprpfnweljs (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lp205 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lambprobe7763 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiwdeynkjctd (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2026-54901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj::Parser in usual mode does not mark arrayclass...

CVE-2026-57234 affecting package rubygem-nokogiri for versions less than 1.19.4-1

CVE-2026-57234 affecting package rubygem-nokogiri for versions less than 1.19.4-1. An upgraded version of the package is available that resolves this issue...

GHSA-3V45-F3VH-WG7M vulnerabilities

Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator...

GHSA-M578-W5VF-RFCM vulnerabilities

Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator...