96 matches found
RHEL 8 : ruby:3.3 (RHSA-2026:20614)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:20614 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management task...
Oracle Linux 9 : ruby:3.3 (ELSA-2026-18030)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18030 advisory. - Fix arbitrary code execution via deserialization bypass in ERB. CVE-2026-41316 Resolves: RHEL-171255 - Fix possible denial of service in resolv gem...
Important: ruby3.4
Issue Overview: ERB is a templating system for Ruby. Ruby 2.7.0 before ERB 2.2.0 was published on rubygems.org introduced an @init instance variable guard in ERBresult and ERBrun to prevent code execution when an ERB object is reconstructed via Marshal.load deserialization. However, three other...
CVE-2026-42258 vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, gitlab-rails-ce-fips, ruby3.2-rails, ruby3.3-net-imap, logstash-fips, kube-logging-operator, kube-fluentd-operator, ruby3.2-net-imap, ruby3.4-net-imap, ruby4.0-net-imap, gitlab-rails-ce, ruby4.0-rails, logstash, ruby3.4-rails, jruby, truffleruby...
CVE-2026-42257 vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, gitlab-rails-ce-fips, ruby3.2-rails, ruby3.3-net-imap, logstash-fips, kube-logging-operator, kube-fluentd-operator, ruby3.2-net-imap, ruby3.4-net-imap, ruby4.0-net-imap, gitlab-rails-ce, ruby4.0-rails, logstash, ruby3.4-rails, jruby, truffleruby...
CVE-2026-42246 vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, gitlab-rails-ce-fips, ruby3.2-rails, ruby3.3-net-imap, logstash-fips, kube-logging-operator, kube-fluentd-operator, ruby3.2-net-imap, ruby3.4-net-imap, ruby4.0-net-imap, gitlab-rails-ce, ruby4.0-rails, logstash, ruby3.4-rails, jruby, truffleruby...
CVE-2026-34829 vulnerabilities
Vulnerabilities for packages: ruby3.4-rack, ruby3.3-rack, kube-fluentd-operator, ruby4.0-rack, logstash, ruby3.2-rack...
GHSA-8VQR-QJWX-82MW vulnerabilities
Vulnerabilities for packages: ruby3.4-rack, ruby3.3-rack, kube-fluentd-operator, ruby4.0-rack, logstash, ruby3.2-rack...
GHSA-Q2WW-5357-X388 vulnerabilities
Vulnerabilities for packages: ruby3.4-rack, ruby3.3-rack, kube-fluentd-operator, ruby4.0-rack, logstash, ruby3.2-rack...
CVE-2026-34230 vulnerabilities
Vulnerabilities for packages: ruby3.4-rack, ruby3.3-rack, kube-fluentd-operator, ruby4.0-rack, logstash, ruby3.2-rack...
CVE-2026-26962 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails...
GHSA-VGPV-F759-9WX3 vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, gitlab-rails-ce-fips, pact-broker-docker, ruby3.2-rails, ruby3.2-rack, kube-fluentd-operator, gitlab-cng, gitlab-rails-ce, logstash, ruby3.4-rails, ruby4.0-rack, ruby3.3-rack, ruby3.4-rack...
GHSA-QFGR-CRR9-7R49 vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, ruby3.2-rails, pact-broker-docker, kube-fluentd-operator, logstash, ruby3.4-rails...
GHSA-Q2WW-5357-X388 vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, gitlab-rails-ce-fips, pact-broker-docker, ruby3.2-rails, ruby3.2-rack, kube-fluentd-operator, gitlab-cng, gitlab-rails-ce, logstash, ruby3.4-rails, ruby4.0-rack, ruby3.3-rack, ruby3.4-rack...
CVE-2026-32762 vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, ruby3.2-rails, pact-broker-docker, kube-fluentd-operator, logstash, ruby3.4-rails...
GHSA-V6X5-CG8R-VV6X vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, ruby3.2-rails, pact-broker-docker, kube-fluentd-operator, logstash, ruby3.4-rails...
GHSA-625H-95R8-8XPM vulnerabilities
Vulnerabilities for packages: ruby3.2-rack, ruby3.3-rack, ruby3.4-rack, ruby4.0-rack...
GHSA-53P3-C7VP-4MCC vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, ruby3.4-rails, ruby3.2-rails, ruby4.0-rails...