Ruby@* Security Vulnerabilities and Issues — Ruby@* CVE List

Lucene search

Ruby-langRuby*

2 matches found

CVE•added 2021/04/21 7:15 a.m.•379 views

CVE-2021-28965

The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.

7.5CVSS7.6AI score0.00387EPSS

CVE•added 2021/07/30 2:15 p.m.•114 views

CVE-2021-28966

In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.

7.5CVSS7.3AI score0.00325EPSS