CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

470 matches found

CVE-2026-53624 Fiber: HSTS header never set in helmet middleware due to incorrect protocol check

Fiber is an Express inspired web framework written in Go. Prior to 3.4.0, the helmet middleware in middleware/helmet/helmet.go never sets the Strict-Transport-Security response header even when HSTSMaxAge is configured because it checks c.Protocol for https instead of c.Scheme. This issue is fixe...

4.8CVSS0.00207EPSS

Exploits0References4

NVD•added 2026/07/06 10:16 p.m.•7 views

CVE-2026-38973

mrubyc through release3.4.1 was found to contain an out-of-bounds read in builtin missing-method lookup inside mrbcfindmethod...

4.4CVSS0.00116EPSS

Exploits0References3

RedHat Linux•added 2026/07/03 11:16 a.m.•4 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby3.4: ruby3.4-3.4.9-31.4.hum1 aarch64, x8664 ruby3.4-bundled-gems-3.4.9-31.4.hum1 aarch64, x8664 ruby3.4-default-gems-3.4.9-31.4.hum1 noarch ruby3.4-devel-3.4.9-31.4.hum1 aarch64, x8664...

9.8CVSS6.1AI score0.00813EPSS

Exploits0References4

RedHat Linux•added 2026/07/01 1:59 p.m.•5 views

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby3.4: ruby3.4-3.4.8-31.3.hum1 aarch64, x8664 ruby3.4-bundled-gems-3.4.8-31.3.hum1 aarch64, x8664 ruby3.4-default-gems-3.4.8-31.3.hum1 noarch ruby3.4-devel-3.4.8-31.3.hum1 aarch64, x8664...

5.8CVSS5.9AI score0.00239EPSS

Exploits0References4

RedHat Linux•added 2026/06/30 2:25 p.m.•8 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby3.4: ruby3.4-3.4.8-31.2.hum1 aarch64, x8664 ruby3.4-bundled-gems-3.4.8-31.2.hum1 aarch64, x8664 ruby3.4-default-gems-3.4.8-31.2.hum1 noarch ruby3.4-devel-3.4.8-31.2.hum1 aarch64, x8664...

7.6CVSS5.8AI score0.0041EPSS

Exploits0References5

Chainguard•added 2026/06/26 8:23 p.m.•10 views

GHSA-VWM4-62GF-X745 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

Query Builder