Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:19709
HistoryMay 16, 2019 - 3:22 a.m.

Improper Signature Validation

2019-05-1603:22:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18

EPSS

0.014

Percentile

86.6%

Ruby is vulnerable to improper signature validation vulnerability. This occurs in the tarball in package.rb which allows to install mis-signed gem.