CVE-2025-61919 vulnerabilities

Vulnerabilities for packages: ruby3.3-rack, ruby3.4-rack, ruby3.2-rack, ruby4.0-rack, kube-fluentd-operator...

CVE-2025-61780 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.2-rack, ruby3.4-rack, ruby3.2-rails, ruby4.0-rack, ruby3.3-rack, gitlab-rails-ce, kube-fluentd-operator, ruby3.3-rails, ruby3.4-rails...

GHSA-R657-RXJC-J557 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.2-rack, ruby3.4-rack, ruby3.2-rails, ruby4.0-rack, ruby3.3-rack, gitlab-rails-ce, kube-fluentd-operator, ruby3.3-rails, ruby3.4-rails...

CVE-2025-61919 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.2-rack, ruby3.4-rack, ruby3.2-rails, ruby4.0-rack, ruby3.3-rack, gitlab-rails-ce, kube-fluentd-operator, ruby3.3-rails, ruby3.4-rails...

npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels

Cybersecurity researchers have identified several malicious packages across npm, Python, and Ruby ecosystems that leverage Discord as a command-and-control C2 channel to transmit stolen data to actor-controlled webhooks. Webhooks on Discord are a way to post messages to channels in the platform...

ROS-20251014-01

The vulnerability of the Rack module interface of the Ruby programming language interpreter is related to the fact that application does not properly control consumption of internal resources in the function "Rack::QueryParser" function. Exploitation of the vulnerability could allow an attacker...

There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.

...

GHSA-MR3Q-G2MV-MR4Q Sinatra is vulnerable to ReDoS through ETag header value generation

Summary There is a denial of service vulnerability in the If-Match and If-None-Match header parsing component of Sinatra, if the etag method is used when constructing the response and you are using Ruby = 3.2...

Sinatra is vulnerable to ReDoS through ETag header value generation

Summary There is a denial of service vulnerability in the If-Match and If-None-Match header parsing component of Sinatra, if the etag method is used when constructing the response and you are using Ruby = 3.2...

EUVD-2025-33767

Sinatra is a domain-specific language for creating web applications in Ruby. In versions prior to 4.2.0, there is a denial of service vulnerability in the If-Match and If-None-Match header parsing component of Sinatra, if the etag method is used when constructing the response. Carefully crafted...

Sinatra is vulnerable to ReDoS through ETag header value generation

Summary There is a denial of service vulnerability in the If-Match and If-None-Match header parsing component of Sinatra, if the etag method is used when constructing the response and you are using Ruby = 3.2...

OPENSUSE-SU-2025:15623-1 ruby3.4-rubygem-rack-session-2.1.1-1.1 on GA media

These are all security issues fixed in the ruby3.4-rubygem-rack-session-2.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

ruby3.4-rubygem-rack-2.2-2.2.19-1.1 on GA media (moderate)

ruby3.4-rubygem-rack-2.2-2.2.19-1.1 on GA media Announcement ID: openSUSE-SU-2025:15621-1 Rating: moderate Cross-References: CVE-2025-61770 CVE-2025-61771 CVE-2025-61772 CVSS scores: CVE-2025-61770 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-61770 SUSE : 8.7...

CVE-2025-61771 vulnerabilities

Vulnerabilities for packages: ruby3.3-rack, ruby4.0-rack, gitlab-cng, ruby3.2-rack, ruby3.4-rack...

GHSA-P543-XPFM-54CP vulnerabilities

Vulnerabilities for packages: ruby3.3-rack, ruby4.0-rack, gitlab-cng, ruby3.2-rack, ruby3.4-rack...

CVE-2025-61770 vulnerabilities

Vulnerabilities for packages: ruby3.3-rack, ruby4.0-rack, gitlab-cng, ruby3.2-rack, ruby3.4-rack...

GHSA-W9PC-FMGC-VXVW vulnerabilities

Vulnerabilities for packages: ruby3.3-rack, ruby4.0-rack, gitlab-cng, ruby3.2-rack, ruby3.4-rack...

Fedora 44 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2025-6e5c27d218)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-6e5c27d218 advisory. Update to Ruby on Rails 8.0.3 Fix CVE-2025-24293: Active Storage allowed transformation methods potentially unsafe Fix CVE-2025-55193: ANSI escape...

OPENSUSE-SU-2025:15621-1 ruby3.4-rubygem-rack-2.2-2.2.19-1.1 on GA media

These are all security issues fixed in the ruby3.4-rubygem-rack-2.2-2.2.19-1.1 package on the GA media of openSUSE Tumbleweed...

libruby3_4-3_4-3.4.7-1.1 on GA media (moderate)

libruby34-34-3.4.7-1.1 on GA media Announcement ID: openSUSE-SU-2025:15614-1 Rating: moderate Cross-References: CVE-2025-61594 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...