MAL-2026-16639 Malicious code in biundlar (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16636 Malicious code in biundiler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16609 Malicious code in birundler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16593 Malicious code in biandler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16591 Malicious code in bhnlder (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16561 Malicious code in bamdler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

abhinavagarwal07.github.io

Chirpy Starter When installing the Chirpy theme through RubyGems.org, Jekyll can only read files in the folders data, layouts, includes, sass and assets, as well as a small part of options of the config.yml file from the theme's gem. If you have ever installed this theme gem, you can use the...

[SECURITY] Fedora 44 Update: rubygems-4.0.20-1.fc44

RubyGems is the Ruby standard for publishing and managing third party libraries...

[SECURITY] Fedora 45 Update: rubygems-4.0.20-1.fc45

RubyGems is the Ruby standard for publishing and managing third party libraries...

Fedora 44 : rubygems (2026-2857104379)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2857104379 advisory. Update rubygems to 4.0.20. Additionally, several security issues were found in resolv gem bundled in rubygems. This update resolves these issues by...

Fedora 45 : rubygems (2026-9831a751e2)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9831a751e2 advisory. Update rubygems to 4.0.20. Additionally, several security issues were found in resolv gem bundled in rubygems. This update resolves these issues by...

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

The "major malicious attack" that targeted RubyGems in May 2026 was the work of a swarm of OpenAI agents, according to a new report published by researchers Spencer Kitts, Thomas Larsen, and Sydney Von Arx. On May 12, Maciej Mensfeld, senior product manager for software supply chain security at...

Fedora 46 : rubygems (2026-c77b963cc9)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c77b963cc9 advisory. Automatic update for rubygems-4.0.20-1.fc46. Changelog Thu Sep 3 2026 Mamoru TASAKA - 4.0.20-1 - Update to RubyGems 4.0.20 - Backport ruby upstream...

CVE-2017-4878

creationtimestamp| type| source ---|---|--- 2026-09-05 13:00:05+00:00| seen| Telegram/Rye4nFjgPibFUf7HyVjUTP6MPf9VB3fBkIKhegqBZOEZc4 2026-09-06 00:00:45+00:00| published-proof-of-concept| Telegram/Rye4nFjgPibFUf7HyVjUTP6MPf9VB3fBkIKhegqBZOEZc4...

Linux Distros Unpatched Vulnerability : CVE-2026-82455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination...

AZL-98403 CVE-2026-82455 affecting package ruby 3.3.5-9

RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...

CVE-2026-82455

Rejected reason: The RubyGems maintainers determined that the reported symlink-following behavior during gem extraction is not a security vulnerability, so no vulnerability exists for this record to describe...

CVE-2026-82455

Rejected reason: The RubyGems maintainers determined that the reported symlink-following behavior during gem extraction is not a security vulnerability, so no vulnerability exists for this record to describe...

UBUNTU-CVE-2026-82455

RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...

CVE-2026-82455 RubyGems before 4.0.13 Path Traversal via Symlink Resolution

RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...