Important: Red Hat Security Advisory: rh-ruby27-ruby security update

An update for rh-ruby27-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

The vulnerability of the regular expression processor in the Mime-type parser of the ActionDispatch framework in the Ruby programming platform of Ruby on Rails, related to an uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the regular expression processor in the Mime-type parser of the ActionDispatch framework in the Ruby programming platform’s Ruby on Rails framework is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability in the implementation of the Net::FTP class in the Ruby interpreter allows a hacker to gain unauthorized access to protected information.

The vulnerability in the implementation of the Net::FTP class in Ruby is related to deficiencies in protecting service data using the PASV command. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2021-2445)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : ruby (EulerOS-SA-2021-2445)

According to the version of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF...

Dragonfly Ruby Gem < 1.4.0 Argument Injection Vulnerability

Dragonfly is a popular ruby library used for handling images on websites to generate image thumbnails, text images or managing attachments. When the verifyurls option is disabled, an attacker can leverage the vulnerability to inject malicious arguments to shell commands and achieve file read and...

CVE-2021-32066 affecting package ruby 2.6.7-3

CVE-2021-32066 affecting package ruby 2.6.7-3. A patched version of the package is available...

USN-5020-1: Ruby vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. CVE-2021-31799 It was discovered that Ruby incorrectly handled certain...

Moderate Photon OS Security Update - PHSA-2021-4.0-0096

Updates of 'ruby' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2021-0096

Updates of 'ruby' packages of Photon OS have been released...

GitLab Information Disclosure Vulnerability (CNVD-2022-23495)

GitLab is a self-hosted, Git version control system project repository application developed in Ruby on Rails by GitLab, Inc. GitLab is vulnerable to an information disclosure vulnerability caused by an unrestricted instance of the application's "/user.keys" route that disables public visibility...

Exploit for Command Injection in Rubyonrails Rails

CVE-2019-5420 A vulnerability can allow an attacker to guess t...

Exploit for Command Injection in Rubyonrails Rails

CVE-2019-5420 A vulnerability can allow an attacker to guess t...

MGASA-2021-0417 Updated ruby-addressable packages fix security vulnerability

A security flaw was found on rubygem-addressable that a crafted template may cause a Denial of Service CVE-2021-32740...

Updated ruby-addressable packages fix security vulnerability

A security flaw was found on rubygem-addressable that a crafted template may cause a Denial of Service CVE-2021-32740...

GHSA-GGXM-PGC9-G7FP Arbitrary Code Execution in Rdoc

In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename...

Arbitrary Code Execution in Rdoc

In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename...

Ruby: XSS exploit of RDoc documentation generated by rdoc

Vulnerability description not provided...

The vulnerability in the implementation of the Net::IMAP class in the Ruby interpreter allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability in the implementation of the Net::IMAP class in the Ruby interpreter is related to errors in the process of verifying the authenticity of certificates when processing the STARTTLS command. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middl...

Vulnerability fixed in Ruby on Rails

A vulnerability has been fixed in Ruby on Rails. The vulnerability allows a malicious person to use an Open Redirect attack to send the visitor with a custom link to a malicious website. send. Ruby on Rails has released updates to fix the vulnerability. fix. For more information, see:...