Upgrade Amazon-Linux:2023 vim-data to version 2:9.0.1160-1.amzn2023.0.2 or higher. This issue was patched in ALAS2023-2023-098 .

ruby:2.6/rubygem-mysql2-doc vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the ruby:2.6/rubygem-mysql2-doc package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Arbitrary Code Injection	<0:0.4.10-4.module_el8.5.0+2625+ec418553
M Uncontrolled Search Path Element	<0:0.5.2-1.module_el8.5.0+2623+08a8ba32
M CVE-2021-28965	<0:0.5.2-1.module_el8.5.0+2623+08a8ba32
M HTTP Request Smuggling	<0:0.5.2-1.module_el8.5.0+2623+08a8ba32
M Use of Uninitialized Resource	<0:0.5.2-1.module_el8.5.0+2623+08a8ba32
M Improper Input Validation	<0:0.5.2-1.module_el8.5.0+2623+08a8ba32
M Arbitrary Code Injection	<0:0.5.2-1.module_el8.5.0+2623+08a8ba32
M Arbitrary Code Injection	<0:0.5.2-1.module_el8.5.0+2623+08a8ba32
M Improper Authentication	<0:0.5.2-1.module_el8.5.0+2623+08a8ba32
M CVE-2019-15845	<0:0.5.2-1.module_el8.5.0+2623+08a8ba32
H CVE-2020-36327	<0:0.4.10-4.module_el8.5.0+2625+ec418553
H Improper Handling of Exceptional Conditions	<0:0.5.2-1.module_el8.5.0+250+ba22dbf7
H CVE-2021-31810	<0:0.5.2-1.module_el8.5.0+250+ba22dbf7
H OS Command Injection	<0:0.5.2-1.module_el8.5.0+250+ba22dbf7
H Reliance on Cookies without Validation and Integrity Checking	<0:0.5.2-1.module_el8.5.0+250+ba22dbf7
H Inefficient Regular Expression Complexity	<0:0.5.2-1.module_el8.5.0+250+ba22dbf7