ruby-default-gems vulnerabilities

Known vulnerabilities in the ruby-default-gems package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Inefficient Regular Expression Complexity	<0:3.1.5-144.module+el8.10.0+22580+b97d9670
M Improper Validation of Specified Type of Input	*
M Covert Timing Channel	*
M Resource Exhaustion	*
M Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<0:3.3.5-3.module+el8.10.0+22271+6a48b0b9
M Resource Exhaustion	<0:3.3.5-3.module+el8.10.0+22271+6a48b0b9
M Resource Exhaustion	<0:3.3.5-3.module+el8.10.0+22271+6a48b0b9
L Resource Exhaustion	*
M Arbitrary Code Injection	<0:3.3.1-2.module+el8.10.0+21860+47fbda2a
M Buffer Over-read	<0:3.3.1-2.module+el8.10.0+21860+47fbda2a
M Out-of-bounds Read	<0:3.3.1-2.module+el8.10.0+21860+47fbda2a
M Incorrect Regular Expression	*
M Improper Input Validation	<0:2.7.8-139.module+el8.8.0+18745+f1bef313
M Improper Input Validation	<0:2.7.8-139.module+el8.8.0+18745+f1bef313
M HTTP Response Splitting	<0:2.7.8-139.module+el8.8.0+18745+f1bef313
M Out-of-bounds Read	<0:2.7.6-138.module+el8.6.0+16148+54b2ba8f
M Double Free	<0:3.0.4-141.module+el8.6.0+16311+3e5e17e9
M Arbitrary Argument Injection	*
M Reliance on Cookies without Validation and Integrity Checking	<0:2.7.6-138.module+el8.6.0+16148+54b2ba8f
M Resource Exhaustion	<0:2.7.6-138.module+el8.6.0+16148+54b2ba8f
M XML External Entity (XXE) Injection	<0:2.7.3-136.module+el8.4.0+10728+4c884998
M HTTP Request Smuggling	<0:2.7.3-136.module+el8.4.0+10728+4c884998
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Uncontrolled Recursion	*
H Cleartext Transmission of Sensitive Information	<0:2.7.4-137.module+el8.4.0+12025+f744ca41
H Information Exposure	<0:2.7.4-137.module+el8.4.0+12025+f744ca41
H Arbitrary Command Injection	<0:2.7.4-137.module+el8.4.0+12025+f744ca41
H Download of Code Without Integrity Check	<0:2.7.4-137.module+el8.4.0+12025+f744ca41
M Integer Overflow or Wraparound	*
M Out-of-bounds Read	*
L NULL Pointer Dereference	*

Vulnerability

Vulnerable Version

Inefficient Regular Expression Complexity

<0:3.1.5-144.module+el8.10.0+22580+b97d9670

Improper Validation of Specified Type of Input