Malicious code in sprox-c160-2bzr (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dlxlast (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

ROS-20260707-73-0010

The vulnerability in rubygem-yard is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Photon OS 4.0: Rubygem PHSA-2026-4.0-1051

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1051. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-54906 affecting package rubygem-concurrent-ruby for versions less than 1.3.7-1

CVE-2026-54906 affecting package rubygem-concurrent-ruby for versions less than 1.3.7-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-57434 affecting package rubygem-nokogiri for versions less than 1.19.4-1

CVE-2026-57434 affecting package rubygem-nokogiri for versions less than 1.19.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-57435 affecting package rubygem-nokogiri for versions less than 1.19.4-1

CVE-2026-57435 affecting package rubygem-nokogiri for versions less than 1.19.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-57236 affecting package rubygem-nokogiri for versions less than 1.19.4-1

CVE-2026-57236 affecting package rubygem-nokogiri for versions less than 1.19.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-57438 affecting package rubygem-nokogiri for versions less than 1.19.4-1

CVE-2026-57438 affecting package rubygem-nokogiri for versions less than 1.19.4-1. An upgraded version of the package is available that resolves this issue...

ruby:3.3 security update

ruby 3.3.10-7 - Fix DoS via crafted IMAP responses in net-imap. CVE-2026-42245 Resolves: RHEL-181682 - Fix information disclosure via MITM attack bypassing TLS in net-imap. CVE-2026-42246 Resolves: RHEL-181759 - Fix command injection via Symbol arguments in net-imap. CVE-2026-42258 Resolves:...

Important Photon OS Security Update - PHSA-2026-5.0-0911

Updates of 'rubygem-nokogiri', 'rubygem-faraday', 'python3-mistune', 'python3-urllib3' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-91-0911

Updates of 'rubygem-faraday', 'python3-urllib3', 'rubygem-nokogiri', 'python3-mistune' packages of Photon OS have been released...

Photon OS 5.0: Rubygem PHSA-2026-5.0-0909

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0909. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Critical Photon OS Security Update - PHSA-2026-5.0-0909

Updates of 'rubygem-concurrent-ruby' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0909

Updates of 'rubygem-concurrent-ruby' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-4.0-1046

Updates of 'rubygem-concurrent-ruby' packages of Photon OS have been released...

ROS-20260626-73-0026

The vulnerability in rubygem-rdiscount relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

MiracleLinux 8 : ruby:3.3 (AXSA:2026-769:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-769:01 advisory. erb: ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 Tenable has extracted the preceding description block directly from the...

[SECURITY] Fedora 43 Update: rubygem-yard-0.9.37-5.fc43

YARD is a documentation generation tool for the Ruby programming language. It enables the user to generate consistent, usable documentation that can be exported to a number of formats very easily, and also supports extending for custom Ruby constructs such as custom class level definitions...

Fedora 43 : rubygem-yard (2026-2d0a32ddc0)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2d0a32ddc0 advisory. Backport 0.9.41 / 0.9.44 fixes for possible path traversal issues Tenable has extracted the preceding description block directly from the Fedora security...