Lucene search
+L
RubygemsMost viewed

1292 matches found

RubySec
RubySec
•added 2026/03/23 12:00 a.m.•27 views

Rails has a possible XSS vulnerability in its Action View tag helpers

Impact When a blank string is used as an HTML attribute name in Action View tag helpers, the attribute escaping is bypassed, producing malformed HTML. A carefully crafted attribute value could then be misinterpreted by the browser as a separate attribute name, possibly leading to XSS. Application...

2.3CVSS5.8AI score0.00713EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2026/02/27 12:00 a.m.•27 views

rubyipmi is vulnerable to OS Command Injection through malicious usernames

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.8CVSS6.5AI score0.00771EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2025/08/07 12:00 a.m.•27 views

JWE is missing AES-GCM authentication tag validation in encrypted JWE

Overview The authentication tag of encrypted JWEs can be brute forced, which may result in loss of confidentiality for those JWEs and provide ways to craft arbitrary JWEs. Impact - JWEs can be modified to decrypt to an arbitrary value - JWEs can be decrypted by observing parsing differences - The...

9.1CVSS6.4AI score0.00244EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2025/03/12 12:00 a.m.•27 views

Ruby SAML allows a SAML authentication bypass due to DOCTYPE handling (parser differential)

Summary An authentication bypass vulnerability was found in ruby-saml due to a parser differential. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping...

9.8CVSS7.2AI score0.20586EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2025/03/12 12:00 a.m.•27 views

Ruby SAML allows a SAML authentication bypass due to namespace handling (parser differential)

Summary An authentication bypass vulnerability was found in ruby-saml due to a parser differential. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping...

9.8CVSS7.2AI score0.65086EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2024/10/15 12:00 a.m.•27 views

Possible ReDoS vulnerability in block_format in Action Mailer

There is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact Carefully crafted text can cause the blockformat helper to take an unexpected amount of time, possibly resulting in a DoS vulnerabilit...

8.7CVSS6.9AI score0.00937EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2023/12/18 12:00 a.m.•27 views

Resque Scheduler Reflected XSS In Delayed Jobs View

Impact Resque Scheduler version 1.27.4 and above are affected by a cross-site scripting vulnerability. A remote attacker can inject javascript code to the "schedulejob" or "args" parameter in /resque/delayed/jobs/schedulejob?args=argsid to execute javascript at client side. Patches Fixed in v4.10...

6.1CVSS7.1AI score0.00623EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2023/03/13 12:00 a.m.•27 views

Possible Deserialization of Untrusted Data Vulnerability in Kredis JSON

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code. This vulnerability has been assigned the CVE identifier CVE-2023-27531. 'Not affected: None.' 'Versions Affected: All.' 'Fixed Versions: 1.3.0.1' Impact Carefully crafted JSON data processed by...

5.3CVSS6.3AI score0.00527EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2022/05/24 12:00 a.m.•27 views

Nokogiri Implements libxml2 version vulnerable to use-after-free

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability...

8.8CVSS6.6AI score0.03653EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2022/05/17 12:00 a.m.•27 views

Incorrect Authorization in publify

Improper Access Control in GitHub repository publify/publify prior to 9.2.8. Anonymous users can't view but can leave comments on an article in draft mode...

6.5CVSS4.4AI score0.00828EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2022/02/17 12:00 a.m.•27 views

Out-of-bounds Read in mruby/mruby

Out-of-bounds Read in Homebrew mruby prior to 3.2...

9.1CVSS6.8AI score0.01637EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2020/10/07 12:00 a.m.•27 views

Possible XSS Vulnerability in Action Pack in Development Mode

There is a possible XSS vulnerability in Action Pack while the application server is in development mode. This vulnerability is in the Actionable Exceptions middleware. This vulnerability has been assigned the CVE identifier CVE-2020-8264. Versions Affected: = 6.0.0 Not affected: 6.0.0 Fixed...

6.1CVSS4.8AI score0.66986EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2019/12/16 12:00 a.m.•27 views

Race condition when using persistent connections

There was a race condition around persistent connections, where a connection which is interrupted such as by a timeout would leave data on the socket. Subsequent requests would then read this data, returning content from the previous response. The race condition window appears to be short, and it...

5.9CVSS6.7AI score0.01439EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2019/09/12 12:00 a.m.•27 views

Denial of Service in rubyzip ("zip bombs")

In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of service disk consumption...

7.1CVSS4.6AI score0.01581EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2019/01/17 12:00 a.m.•27 views

bootstrap Cross-site Scripting vulnerability

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property...

6.1CVSS6.1AI score0.03984EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2019/01/17 12:00 a.m.•27 views

bootstrap Cross-site Scripting vulnerability

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property...

6.1CVSS6.1AI score0.03984EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2018/04/17 12:00 a.m.•27 views

Use after free caused by integer overflow in environment stack

In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrbvmexec when handling OPGETUPVAR in the presence of deep scope nesting, resulting in a use-after-free. An attacker that can cause Ruby code to be run can use this to possibly execute arbitrary code...

9.8CVSS7.5AI score0.02605EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2017/10/24 12:00 a.m.•27 views

Potential XSS Vulnerability in Ruby on Rails Applications

The cross-site scripting XSS prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via crafted strings to an application that uses a...

4.3CVSS5.5AI score0.01962EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2017/10/24 12:00 a.m.•27 views

Agent Imprersonation in Puppet

lib/puppet/network/authstore.rb in Puppet before 2.7.18, and Puppet Enterprise before 2.5.2, supports use of IP addresses in certnames without warning of potential risks, which might allow remote attackers to spoof an agent by acquiring a previously used IP address...

2.6CVSS6.7AI score0.01641EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2017/10/24 12:00 a.m.•27 views

High severity vulnerability that affects rails

Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 :limit and 2 :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer...

7.5CVSS8.9AI score0.0303EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2017/01/11 12:00 a.m.•27 views

omniauth leaks authenticity token in callback params

In strategy.rb in OmniAuth before 1.3.2, the authenticitytoken value is improperly protected because POST in addition to GET parameters are stored in the session and become available in the environment of the callback phase...

7.5CVSS4.8AI score0.02129EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2016/11/09 12:00 a.m.•27 views

Predictable tmp File Path Vulnerability in Phusion Passenger

In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...

7.8CVSS6.6AI score0.00464EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2016/05/18 12:00 a.m.•27 views

rack-mini-profiler may disclose information to unauthorized users

Carefully crafted requests can expose information about strings and objects allocated during the request for unauthorised users...

5.3CVSS6.8AI score0.01565EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2015/06/04 12:00 a.m.•27 views

Data Injection Vulnerability in bson Rubygem

A flaw in the ObjectId validation regular expression can enable attackers to inject arbitrary information into a given BSON object...

9.8CVSS6.7AI score0.04663EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2014/08/13 12:00 a.m.•27 views

CVE-2013-0334 rubygem-bundler: 'bundle install' may install a gem from a source other than expected

Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source. A flaw was found in the way Bundler handled gems available from multiple sources. An attacker with access...

5CVSS2.3AI score0.03851EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2014/03/13 12:00 a.m.•27 views

CVE-2014-0135 rubygem-kafo: temporary file creation vulnerability when creating /tmp/default_values.yaml

Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for defaultvalues.yaml, which allows local users to obtain passwords and other sensitive information by reading the file...

1.9CVSS5.7AI score0.00331EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2014/01/14 12:00 a.m.•27 views

Ember.js Potential XSS Exploit With User-Supplied Data When Using {{group}} Helper

In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML. However, we have identified a vulnerability that could lead to unescaped content being inserted into the innerHTML string without being sanitized. When using the group...

5.4CVSS0.2AI score0.01196EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2013/01/11 12:00 a.m.•27 views

multi_xml Gem for Ruby XML Parameter Parsing Remote Command Execution

The multixml Gem for Ruby contains a flaw that is triggered when an error occurs during the parsing of the 'XML' parameter. With a crafted request containing arbitrary symbol and yaml types, a remote attacker can execute arbitrary commands...

7.5CVSS6AI score0.03726EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2011/10/27 12:00 a.m.•27 views

Puppet uses predictable filenames, allowing arbitrary file overwrite

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in --edit mode, uses a predictable file name, which allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files...

6.2CVSS7.2AI score0.00338EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2026/07/13 12:00 a.m.•26 views

Decidim - Forms admin question editor lacks authorization

Description A participant can load the demographics questionnaire admin editor and make changes. Impact - Low-privilege users can access questionnaire-admin interfaces. - They can read question-management surfaces that should remain limited to questionnaire managers. Credits This issue was...

5.4CVSS6.1AI score0.00171EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2026/07/13 12:00 a.m.•26 views

Decidim - JWT-backed authentication can be replayed across organizations

Description A JWT issued to an Org 1 account is accepted on the Org 2 API and can read the admin-only GraphQL participantDetails field for an Org 2 participant. The same trust-boundary problem also affects API-user authentication: an Org 1 API user can use a JWT on the Org 1 host and replay that...

8.5CVSS6.1AI score0.00324EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2026/06/19 12:00 a.m.•26 views

Oj - intern.c form_attr (uninitialized stack read)

Summary Oj.load in :object mode reads uninitialized stack memory and, for long keys, reads out of bounds when parsing a JSON object whose key is 254 bytes or longer. The interned bytes can surface to the caller, disclosing process stack memory. Impact Information disclosure of process stack memor...

5.3CVSS5.9AI score0.00198EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2026/06/04 12:00 a.m.•26 views

Reused Component Instances Retain Stale Render Context

Summary ViewComponent::Base instances retain multiple render-scoped objects across calls to renderin. If the same component, collection, or spacer component instance is reused across requests, users, tenants, or threads, later renders can use stale helpers, controller, request, viewflow,...

6.8CVSS5.9AI score0.00249EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2026/06/03 12:00 a.m.•26 views

redact additional sensitive/risky headers when following redirects

Impact The redirect follower middleware previously failed to strip a number of headers that are known to be sensitive and did not provide a way to provide a custom list of headers to strip. What kind of vulnerability is it? Who is impacted? This could cause inadvertent leakage of sensitive data f...

6.5CVSS5.3AI score0.00427EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2026/05/04 12:00 a.m.•26 views

net-imap vulnerable to command Injection via "raw" arguments to multiple commands

Summary Several Net::IMAP commands accept a raw string argument that is sent to the server without validation or escaping. If this string is derived from user-controlled input, it may contain contain CRLF sequences, which an attacker can use to inject arbitrary IMAP commands. Details Net::IMAP's...

9.8CVSS5.9AI score0.00429EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2026/03/05 12:00 a.m.•26 views

Buffer overflow vulnerability in Zlib::GzipReader

A buffer overflow vulnerability exists in Zlib::GzipReader. This vulnerability has been assigned the CVE identifier CVE-2026-27820. We recommend upgrading the zlib gem. Details The zstreambufferungets function prepends caller-provided bytes ahead of previously produced output but fails to guarant...

9.8CVSS6AI score0.00561EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2025/07/09 12:00 a.m.•26 views

Possible Denial of Service in resolv gem

A denial of service vulnerability has been discovered in the resolv gem bundled with Ruby. This vulnerability has been assigned the CVE identifier CVE-2025-24294. We recommend upgrading the resolv gem. Details The vulnerability is caused by an insufficient check on the length of a decompressed...

7.5CVSS6.7AI score0.00565EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2024/09/25 12:00 a.m.•26 views

Heap-based Buffer Overflow in sqlite-vec

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file. Workaround for CVE in release 0.1.3...

9.1CVSS7.2AI score0.00438EPSS
SaveExploits2References1Affected Software1
RubySec
RubySec
•added 2024/08/01 12:00 a.m.•26 views

DoS vulnerabilities in REXML

There is a DoS vulnerability in REXML gem. This vulnerability has been assigned the CVE identifier CVE-2024-41946. We strongly recommend upgrading the REXML gem. Details When parsing an XML that has many entity expansions with SAX2 or pull parser API, REXML gem may take long time. Please update...

7.5CVSS5.4AI score0.01192EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2024/02/20 12:00 a.m.•26 views

Possible CSRF attack at questionnaire templates preview

Impact The CSRF authenticity token check is currently disabled for the questionnaire templates preview as per: https://github.com/decidim/decidim/blob/3187bdfd40ea1c57c2c12512b09a7fec0b2bed08/decidim-templates/app/controllers/decidim/templates/admin/questionnairetemplatescontroller.rbL11 This was...

5.7CVSS7.2AI score0.00313EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2024/01/04 12:00 a.m.•26 views

view_component Cross-site Scripting vulnerability

Impact What kind of vulnerability is it? Who is impacted? This is an XSS vulnerability that has the potential to impact anyone rendering a component directly from a controller with the viewcomponent gem. Note that only components that define a call method i.e. instead of using a sidecar template...

6.1CVSS6AI score0.00495EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2023/10/19 12:00 a.m.•26 views

External XML entity (XXE) vulnerability in svg_optimizer rubygem

An issue in Fnando svgoptimizer v.0.2.6 allows a remote attacker to escalate privileges when optimizing untrusted SVG content...

5.9CVSS6.9AI score0.00363EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2023/03/27 12:00 a.m.•26 views

GHSL-2022-094: Remote Code Execution in discordrb

The encodefile method may lead to remote code execution RCE if invoked with untrusted user-controlled data...

9.6CVSS7.7AI score0.02567EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2022/05/24 12:00 a.m.•26 views

omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third-party

The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected...

9.8CVSS4.3AI score0.02437EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2022/05/24 12:00 a.m.•26 views

Cross site scripting in publify

In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a result of an unrestricted file upload. This issue allows a user with 'publisher' role to inject malicious JavaScript via the uploaded html file...

5.4CVSS2AI score0.00597EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2022/05/24 12:00 a.m.•26 views

Fat Free CRM Cross-site Scripting vulnerability

HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to the /comments URI...

5.4CVSS2.3AI score0.04702EPSS
SaveExploits4References1
RubySec
RubySec
•added 2022/05/14 12:00 a.m.•26 views

RubyGems Improper Input Validation vulnerability

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Input Validation vulnerability in ruby gems specification homepage attribute that can...

5.3CVSS2.9AI score0.03695EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2022/05/13 12:00 a.m.•26 views

hammer_cli_foreman Improper Certificate Validation vulnerability

Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verifyssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks...

8.1CVSS3.1AI score0.00692EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2022/05/01 12:00 a.m.•26 views

Mongrel vulnerable to directory traversal via double-encoded sequences

Directory traversal vulnerability in DirHandler lib/mongrel/handlers.rb in Mongrel 1.0.4 1.0.3 and prior are not affected and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences .%252e...

6.4CVSS7AI score0.03003EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2021/12/17 12:00 a.m.•26 views

Path traversal when MessageBus::Diagnostics is enabled

Impact Users who deployed message bus with diagnostics features enabled default off were vulnerable to a path traversal bug, which could lead to disclosure of secret information on a machine if an unintended user were to gain access to the diagnostic route. The impact is also greater if there is ...

6.5CVSS7AI score0.01869EPSS
SaveExploits0References1Affected Software1
Total number of security vulnerabilities1292