5449 matches found
Malicious code in monolith-twirp-pullsd-teams (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0a21f2e863ad85bc56da074019b5369ed68dc7280d0c81ff65dd8425308c7f6 The OpenSSF Package Analysis project identified 'monolith-twirp-pullsd-teams' @ 1.1.1 rubygems as malicious. It is considered malicious because:...
MAL-2026-2259 Malicious code in monolith-twirp-loops-core (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8d4a98f58930eb7f736a5c69a6cf5de5b6dd033785255d4d55ae1da5a5866629 The OpenSSF Package Analysis project identified 'monolith-twirp-loops-core' @ 1.0.2 rubygems as malicious. It is considered malicious because: -...
Malicious code in plugin-gem-example (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in testcatplzignore (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rubylogger (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-1922 Malicious code in rubylogger (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-1921 Malicious code in resolvrtest (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rafka-rb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-1919 Malicious code in rafka-rb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-1918 Malicious code in newlogger (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in doctolib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-1916 Malicious code in freshworks-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MiracleLinux 7 : ruby-2.0.0.648-36.el7 (AXSA:2019-4276:03)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4276:03 advisory. ruby: HTTP response splitting in WEBrick CVE-2017-17742 ruby: DoS by large request in WEBrick CVE-2018-8777 ruby: Buffer under-read in Stringunpack...
MiracleLinux 7 : rh-ruby25-ruby-2.5.3-6.el7 (AXSA:2019-3613:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3613:01 advisory. ruby: OpenSSL::X509::Name equality check does not work correctly CVE-2018-16395 ruby: HTTP response splitting in WEBrick CVE-2017-17742 ruby: DoS by...
MiracleLinux 7 : ruby-2.0.0.648-35.0.1.el7.AXS7 (AXSA:2019-3890:02)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3890:02 advisory. rubygems: Installing a malicious gem may lead to arbitrary code execution CVE-2019-8324 rubygems: Escape sequence injection vulnerability in gem own...
Astra Linux – Vulnerability in Rubygems
In the URI gem before version 1.0.3 for Ruby, the URI handling methods URI.join, URImerge, URI+ inadvertently allowed authentication credentials to be leaked, as the userinfo was retained even after changing the host...
MAL-2025-192925 Malicious code in verificator (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in stripe-server (RubyGems)
--- -= Per source details. Do not edit below this line.=-...