5626 matches found
MAL-2024-10224 Malicious code in znowflake_client (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zen-ruby-linter (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10223 Malicious code in zen-ruby-linter (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10222 Malicious code in zbt_element_definer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10221 Malicious code in johnny_five (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in johnny_five (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Security Bulletin: IBM Cloud Pak for Data is vulnerable to expose sensitive information due to RubyGems activesupport ( CVE-2023-38037 )
Summary RubyGems activesupport is used by IBM Cloud Pak for Data as part of the platform. CVE-2023-38037. Vulnerability Details CVEID:CVE-2023-38037 DESCRIPTION: RubyGems activesupport gemcould allow a remote authenticated attacker to obtain sensitive information, caused by a flaw in the...
rexml: DoS vulnerability in REXML
A vulnerability was found in REXML RubyGems. This package is vulnerable to denial of service DoS when parsing a deep XML structure with the same local name attribute. This vulnerability only affects tree parser API like REXML::Document.new, other parser APIs such as stream parser API and SAX2...
rexml: DoS vulnerability in REXML
A vulnerability was found in REXML RubyGems. This package is vulnerable to denial of service DoS when parsing a deep XML structure with the same local name attribute. This vulnerability only affects tree parser API like REXML::Document.new, other parser APIs such as stream parser API and SAX2...
RHSA-2014:0207 Red Hat Security Advisory: rubygems security update
Bulletin has no description...
RHSA-2013:1441 Red Hat Security Advisory: rubygems security update
Bulletin has no description...
RHSA-2013:1203 Red Hat Security Advisory: rubygems security update
Bulletin has no description...
fugit parse and parse_nat stall on lengthy input
Impact The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check user input leng...
MAL-2024-7834 Malicious code in melio-platform-api-client (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb4e0efafa3bf0645819f2aa88cfdc7778f938470c0984afc5e1f1504df982aa The OpenSSF Package Analysis project identified 'melio-platform-api-client' @ 5.0.0 rubygems as malicious. It is considered malicious because: -...
MAL-2024-7824 Malicious code in prnigtest (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 33de2220f578380a865d6c3698c4b14d12094a22c8689b41c0aa1215860ca676 The OpenSSF Package Analysis project identified 'prnigtest' @ 1.0 rubygems as malicious. It is considered malicious because: - The package...
MAL-2024-7047 Malicious code in wurl-aws-s3 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wurl-aws-s3 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7046 Malicious code in workarea-gift-cards (RubyGems)
--- -= Per source details. Do not edit below this line.=-...