rubygem-mongo-doc vulnerabilities

Known vulnerabilities in the rubygem-mongo-doc package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M HTTP Request Smuggling	*
M Resource Exhaustion	*
M Inefficient Regular Expression Complexity	*
M Allocation of Resources Without Limits or Throttling	*
M Inefficient Regular Expression Complexity	<0:2.5.1-2.module+el8.9.0+19193+435404ae
M Improper Validation of Specified Type of Input	*
M Covert Timing Channel	*
M Resource Exhaustion	*
M Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
L Resource Exhaustion	*
M Resource Exhaustion	*
L Resource Exhaustion	*
M Arbitrary Code Injection	<0:2.5.1-2.module+el8.9.0+19193+435404ae
M Buffer Over-read	<0:2.5.1-2.module+el8.9.0+19193+435404ae
M Out-of-bounds Read	<0:2.5.1-2.module+el8.9.0+19193+435404ae
M Incorrect Regular Expression	*
M Improper Input Validation	*
M Improper Input Validation	*
M HTTP Response Splitting	<0:2.11.3-1.module+el8.3.0+7192+4e3a532a
M Out-of-bounds Read	<0:2.5.1-2.module+el8.9.0+19193+435404ae
M Arbitrary Argument Injection	*
M Reliance on Cookies without Validation and Integrity Checking	<0:2.11.3-1.module+el8.3.0+7192+4e3a532a
M Resource Exhaustion	<0:2.11.3-1.module+el8.3.0+7192+4e3a532a
M Uncontrolled Search Path Element	<0:2.8.0-1.module+el8.1.0+3653+beb38eb0
M Buffer Access with Incorrect Length Value	<0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
M XML External Entity (XXE) Injection	<0:2.11.3-1.module+el8.3.0+7192+4e3a532a
M HTTP Request Smuggling	<0:2.11.3-1.module+el8.3.0+7192+4e3a532a
M Improper Input Validation	<0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Arbitrary Code Injection	<0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
M HTTP Response Splitting	<0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
M Resource Exhaustion	<0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
M Uncontrolled Recursion	*
M Null Byte Interaction Error (Poison Null Byte)	<0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
H Improper Input Validation	<0:2.5.1-2.module+el8.0.0+3250+4b7d6d43
M Arbitrary Argument Injection	<0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
M Arbitrary Argument Injection	<0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
M Arbitrary Argument Injection	<0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
M Arbitrary Argument Injection	<0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
M Directory Traversal	<0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
M Cleartext Transmission of Sensitive Information	<0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
M Information Exposure	<0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
M Arbitrary Command Injection	<0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
H Download of Code Without Integrity Check	<0:2.8.0-1.module+el8.1.0+3653+beb38eb0
M Integer Overflow or Wraparound	*
M Out-of-bounds Read	*
L NULL Pointer Dereference	*

Vulnerability

Vulnerable Version

HTTP Request Smuggling