19354 matches found
SUSE-SU-2025:02814-1 Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2024-35221: Fixed remote denial of service via YAML manifest bsc1225905...
GHSA-76R7-HHXJ-R776 vulnerabilities
Vulnerabilities for packages: ruby3.2-activerecord, ruby3.3-activerecord, ruby3.4-activerecord...
CVE-2025-55193 vulnerabilities
Vulnerabilities for packages: ruby3.2-activerecord, ruby3.3-activerecord, ruby3.4-activerecord...
GHSA-76R7-HHXJ-R776 vulnerabilities
Vulnerabilities for packages: ruby3.2-activerecord, ruby3.4-activerecord, ruby3.3-activerecord...
CVE-2025-55193 vulnerabilities
Vulnerabilities for packages: ruby3.2-activerecord, ruby3.4-activerecord, ruby3.3-activerecord...
Linux Distros Unpatched Vulnerability : CVE-2022-24790
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Puma is a simple, fast, multi-threaded, parallel HTTP 1.1 server for Ruby/Rack applications. When using Puma behind a proxy that does not properly validate that...
Malicious code in ping-api-ruby (npm)
The package ping-api-ruby was found to contain malicious code...
MAL-2025-9271 Malicious code in @ruby-team/sst-ui-commons (npm)
The package @ruby-team/sst-ui-commons was found to contain malicious code...
Malicious code in kafka-client-ruby (npm)
The package kafka-client-ruby was found to contain malicious code...
Malicious code in ruby-kafka-oauth-client (npm)
The package ruby-kafka-oauth-client was found to contain malicious code...
Malicious code in ruby-limiter (npm)
The package ruby-limiter was found to contain malicious code...
MAL-2025-9270 Malicious code in @ruby-team/sst-tasks (npm)
The package @ruby-team/sst-tasks was found to contain malicious code...
MAL-2025-29262 Malicious code in ping-api-ruby (npm)
The package ping-api-ruby was found to contain malicious code...
MAL-2025-32532 Malicious code in ruby-limiter (npm)
The package ruby-limiter was found to contain malicious code...
Malicious code in quota_tracker_ruby (npm)
The package quotatrackerruby was found to contain malicious code...
MAL-2025-24158 Malicious code in kafka-client-ruby (npm)
The package kafka-client-ruby was found to contain malicious code...
MAL-2025-32531 Malicious code in ruby-kafka-oauth-client (npm)
The package ruby-kafka-oauth-client was found to contain malicious code...
MAL-2025-34365 Malicious code in tableau_ruby (npm)
The package tableauruby was found to contain malicious code...
EulerOS 2.0 SP11 : ruby (EulerOS-SA-2025-1941)
According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.5.7, 0.4.20, 0.3.9, and 0.2.5, there is...
Spree has Remote Command Execution vulnerability in search functionality
Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality. The application fails to properly sanitize input passed via the searchsend parameter, which is dynamically invoked using Ruby’s send method. This allows attackers to execute...