19570 matches found
CVE-2026-31830
sigstore-ruby is a pure Ruby implementation of the sigstore verify command from the sigstore/cosign project. Prior to 0.2.3, Sigstore::Verifierverify does not propagate the VerificationFailure returned by verifyintoto when the artifact digest does not match the digest in the in-toto attestation...
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: CVE-2024-49761: ReDoS vulnerability in REXML gem bsc1232440 bsc1232441. CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations bsc1250016. CVE-2026-27820: insufficient checks in zstreambufferungets can lead to a...
SUSE-SU-2026:1066-1 Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2024-49761: ReDoS vulnerability in REXML gem bsc1232440 bsc1232441. - CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations bsc1250016. - CVE-2026-27820: insufficient checks in zstreambufferungets can lead...
iCalendar injection vulnerability
iCalendar is an open-source Ruby library for processing iCalendar format files. Versions 2.0.0 to 2.12.2 of iCalendar contain a vulnerability due to improper cleanup of URI attribute values during .ics serialization, which may lead to ICS injection attacks...
CVE-2026-33635: Improper Neutralization of CRLF Sequences
iCalendar is a Ruby library for dealing with iCalendar files in the iCalendar format defined by RFC-5545. Starting in version 2.0.0 and prior to version 2.12.2, .ics serialization does not properly sanitize URI property values, enabling ICS injection through attacker-controlled input, adding...
Debian dsa-6180 : ruby-rack - security update
The remote Debian 12 / 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6180 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6180-1 [email protected]...
DSA-6180-1 ruby-rack - security update
Bulletin has no description...
GHSA-73F9-JHHH-HR5M vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce, ruby3.4-rails...
GHSA-V55J-83PF-R9CQ vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce, ruby3.4-rails...
CVE-2026-33169 vulnerabilities
Vulnerabilities for packages: cinc-auditor, gitlab-rails-ce, gitlab-rails-ce-fips, ruby3.2-rails, kube-logging-operator, ruby3.4-rails, kube-fluentd-operator...
GHSA-2J26-FRM8-CMJ9 vulnerabilities
Vulnerabilities for packages: cinc-auditor, gitlab-rails-ce, gitlab-rails-ce-fips, ruby3.2-rails, kube-logging-operator, ruby3.4-rails, kube-fluentd-operator...
CVE-2026-33173 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce, ruby3.4-rails...
GHSA-R46P-8F7G-VVVG vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce, ruby3.4-rails...
CVE-2026-33168 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce, ruby3.4-rails...
GHSA-89VF-4333-QX8V vulnerabilities
Vulnerabilities for packages: cinc-auditor, gitlab-rails-ce, gitlab-rails-ce-fips, ruby3.2-rails, kube-logging-operator, ruby3.4-rails, kube-fluentd-operator...
GHSA-CG4J-Q9V8-6V38 vulnerabilities
Vulnerabilities for packages: cinc-auditor, gitlab-rails-ce, gitlab-rails-ce-fips, ruby3.2-rails, kube-logging-operator, ruby3.4-rails, kube-fluentd-operator...
CVE-2026-33170 vulnerabilities
Vulnerabilities for packages: cinc-auditor, gitlab-rails-ce, gitlab-rails-ce-fips, ruby3.2-rails, kube-logging-operator, ruby3.4-rails, kube-fluentd-operator...
GHSA-QCFX-2MFW-W4CG vulnerabilities
Vulnerabilities for packages: ruby3.2-rails...