19081 matches found
Malicious Package
Overview no-fun is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in bunlder-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-17059 Malicious code in bunlder-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bundler-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16965 Malicious code in bundler-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16942 Malicious code in bundlef-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bundlef-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16845 Malicious code in bumdler-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bumdler-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in biundler-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16658 Malicious code in biundler-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bieundler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
tree-sitter-stack-graphs (>=0.3.0, <=0.6.0), tree-sitter-stack-graphs-java (>=0.0.1, <=0.2.0) +4 more potentially affected by unknown CVE via stack-graphs (>=0.10.2, <=0.14.1)
stack-graphs CARGO version =0.10.2, =0.3.0, =0.0.1, =0.0.1, =0.2.0 - tree-sitter-stack-graphs-python 0.0.1 - tree-sitter-stack-graphs-ruby 0.0.1 - tree-sitter-stack-graphs-typescript 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0303...
tree-sitter-stack-graphs (>=0.3.0, <=0.6.0), tree-sitter-stack-graphs-java (>=0.0.1, <=0.2.0) +4 more potentially affected by unknown CVE via stack-graphs (>=0.10.2, <=0.14.1)
stack-graphs CARGO version =0.10.2, =0.3.0, =0.0.1, =0.0.1, =0.2.0 - tree-sitter-stack-graphs-python 0.0.1 - tree-sitter-stack-graphs-ruby 0.0.1 - tree-sitter-stack-graphs-typescript 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0302...
CVE-2026-94462: Authorization Bypass Through User-Controlled Key
Spree is an open source e-commerce solution built with Ruby on Rails. From 5.4.0 until 5.4.4 and 5.5.4, PATCH /api/v3/store/carts/:id/associate in Spree::Api::V3::Store::CartsControllerassociate uses findcartforassociation to locate a cart by prefixedid but does not require a cart token or...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2023-002143)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002143 advisory. A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: emacs (UTSA-2023-000604)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000604 advisory. An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function has a local command injection vulnerability. The...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2026-090081)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090081 advisory. The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This i...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2026-090111)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090111 advisory. An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocketreadnonblockrequestedsize, buffer, exception: false...
Debian dla-4787 : ruby-jwt - security update
The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4787 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4787-1 [email protected] https://www.debian.org/lts/security/...