MAL-2025-46900 Malicious code in delorean_client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91b594e6698684765fbf40d5f103e207d5e6166eeafd80ba5690100cab008a4c The OpenSSF Package Analysis project identified 'deloreanclient' @ 0.4.0.r09ee7b0 rubygems as malicious. It is considered malicious because: - T...

Malicious code in console_auth (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c545bd0ca0111537f9336af6eeeef4e580a90a7468ff22cf9b1b20dd3fcf51d The OpenSSF Package Analysis project identified 'consoleauth' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The packag...

MAL-2025-46899 Malicious code in console_auth (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c545bd0ca0111537f9336af6eeeef4e580a90a7468ff22cf9b1b20dd3fcf51d The OpenSSF Package Analysis project identified 'consoleauth' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The packag...

Malicious code in egress (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee02802f5d94f135856b832109948906e7a3a39fbea753561a4d518a1d4e889f The OpenSSF Package Analysis project identified 'egress' @ 1.68.g52b0cd0 rubygems as malicious. It is considered malicious because: - The packag...

Malicious code in dependency-snapshots-api-proto (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 631057766f092650ba1257605bb896b689804a362934a08e7354ca7253f43b77 The OpenSSF Package Analysis project identified 'dependency-snapshots-api-proto' @ 99.99.99 rubygems as malicious. It is considered malicious...

MAL-2025-46908 Malicious code in github-kredz (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 537bf1dc9a46b4e69b596275e61de6d1b75ca3eeb2979bde507688f07458c088 The OpenSSF Package Analysis project identified 'github-kredz' @ 1.0.1.1135.gf4a4623f5 rubygems as malicious. It is considered malicious because...

Malicious code in github-kredz (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 537bf1dc9a46b4e69b596275e61de6d1b75ca3eeb2979bde507688f07458c088 The OpenSSF Package Analysis project identified 'github-kredz' @ 1.0.1.1135.gf4a4623f5 rubygems as malicious. It is considered malicious because...

[SECURITY] [DLA 4288-1] ruby-saml security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4288-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 01, 2025 https://wiki.debian.org/LTS -...

DLA-4288-1 ruby-saml - security update

Bulletin has no description...

Debian: Security Advisory (DLA-4288-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4288 : ruby-saml - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4288 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4288-1 [email protected] https://www.debian.org/lts/security/...

Linux Distros Unpatched Vulnerability : CVE-2019-11027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ruby OpenID aka ruby-openid through 2.8.0 has a remotely exploitable flaw. This library is used by Rails web applications to integrate with OpenID Providers...

Linux Distros Unpatched Vulnerability : CVE-2019-18978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the rack-cors aka Rack CORS Middleware gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources becau...

Linux Distros Unpatched Vulnerability : CVE-2021-32740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerabili...

Linux Distros Unpatched Vulnerability : CVE-2019-16779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted such as by a timeout would lea...

Linux Distros Unpatched Vulnerability : CVE-2021-21289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mechanize is an open-source ruby library that makes automated web interaction easy. In Mechanize from version 2.0.0 and before version 2.7.7 there is a command...

Linux Distros Unpatched Vulnerability : CVE-2023-22795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A regular expression based DoS vulnerability in Action Dispatch 6.1.7.1 and 7.0.4.1 related to the If- None-Match header. A specially crafted HTTP If-None-Match...

Linux Distros Unpatched Vulnerability : CVE-2017-16229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the readfromstr function in saxbuf.c when a crafted input is supplied t...

Linux Distros Unpatched Vulnerability : CVE-2024-47220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a...

Linux Distros Unpatched Vulnerability : CVE-2022-31163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as tho...