Direct Vulnerabilities

Known vulnerabilities in the ruby2.1 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Improper Input Validation

<2.1.5-2+deb8u10
  • C
Out-of-bounds Write

<2.1.5-2+deb8u9
  • H
Improper Authentication

<2.1.5-2+deb8u8
  • H
Arbitrary Code Injection

<2.1.5-2+deb8u8
  • M
CVE-2019-15845

<2.1.5-2+deb8u8
  • M
Arbitrary Code Injection

<2.1.5-2+deb8u8
  • H
Directory Traversal

<2.1.5-2+deb8u7
  • H
Arbitrary Code Injection

<2.1.5-2+deb8u7
  • H
Arbitrary Code Injection

<2.1.5-2+deb8u7
  • H
Arbitrary Code Injection

<2.1.5-2+deb8u7
  • H
Arbitrary Code Injection

<2.1.5-2+deb8u7
  • H
CVE-2018-16396

<2.1.5-2+deb8u6
  • C
CVE-2018-16395

<2.1.5-2+deb8u6
  • M
Improper Input Validation

<2.1.5-2+deb8u1
  • H
Resource Exhaustion

<2.1.5-2+deb8u4
  • H
Use of Externally-Controlled Format String

<2.1.5-2+deb8u4
  • C
Directory Traversal

<2.1.5-2+deb8u4
  • H
Directory Traversal

<2.1.5-2+deb8u4
  • M
HTTP Response Splitting

<2.1.5-2+deb8u4
  • H
Improper Input Validation

<2.1.5-2+deb8u4
  • H
Deserialization of Untrusted Data

<2.1.5-2+deb8u5
  • M
Cross-site Scripting (XSS)

<2.1.5-2+deb8u4
  • M
Directory Traversal

<2.1.5-2+deb8u4
  • C
Improper Verification of Cryptographic Signature

<2.1.5-2+deb8u4
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<2.1.5-2+deb8u4
  • H
Link Following

<2.1.5-2+deb8u5
  • M
Improper Input Validation

<2.1.5-2+deb8u4
  • C
Arbitrary Code Injection

<2.1.5-2+deb8u4
  • H
OS Command Injection

<2.1.5-2+deb8u4
  • C
Deserialization of Untrusted Data

<2.1.5-2+deb8u4
  • H
Out-of-Bounds

<2.1.5-2+deb8u4
  • H
Improper Authentication

<2.1.5-2+deb8u4
  • C
Use of Externally-Controlled Format String

<2.1.5-2+deb8u4
  • H
Improper Input Validation

<2.1.5-2+deb8u4
  • C
Arbitrary Code Injection

<2.1.5-2+deb8u4
  • H
Improper Input Validation

<2.1.5-2+deb8u4
  • H
Origin Validation Error

<2.1.5-2+deb8u4
  • C
Out-of-Bounds

<2.1.5-2+deb8u4
  • M
CRLF Injection

<2.1.5-2+deb8u4
  • H
Improper Input Validation

<2.1.5-2+deb8u3
  • H
Inadequate Encryption Strength

<2.1.5-2+deb8u4
  • C
CVE-2016-2337

<2.1.5-2+deb8u5
  • C
Out-of-Bounds

<2.1.5-2+deb8u4
  • H
Improper Input Validation

<2.1.5-2+deb8u3
  • M
Security Features

<2.1.5-2+deb8u2
  • M
CVE-2014-8090

<2.1.5-1
  • M
Improper Data Handling

*
  • M
Out-of-Bounds

<2.1.3-1
  • M
CVE-2014-8080

<2.1.4-1