ruby | Snyk

Direct Vulnerabilities

Known vulnerabilities in the ruby package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Allocation of Resources Without Limits or Throttling	<0:3.3.12-12.el10_0
H Allocation of Resources Without Limits or Throttling	<0:3.3.12-15.el10_2
L Improper Validation of Integrity Check Value	*
M Improper Handling of Length Parameter Inconsistency	*
M CRLF Injection	<0:3.3.12-14.el10_2
M CRLF Injection	<0:3.3.12-14.el10_2
M Incorrect Calculation of Buffer Size	<0:3.3.12-14.el10_2
M Arbitrary Argument Injection	<0:3.3.12-14.el10_2
M Unchecked Input for Loop Condition	<0:3.3.12-14.el10_2
H OS Command Injection	<0:3.3.12-14.el10_2
H OS Command Injection	<0:3.3.12-11.el10_0.3
L Out-of-bounds Write	*
H Missing Required Cryptographic Step	<0:3.3.10-11.el10_0.2
M Unchecked Input for Loop Condition	<0:3.3.10-11.el10_0.2
H CRLF Injection	<0:3.3.10-11.el10_0.2
H CRLF Injection	<0:3.3.10-13.el10_2
M Unchecked Input for Loop Condition	<0:3.3.10-13.el10_2
H Missing Required Cryptographic Step	<0:3.3.10-13.el10_2
H Deserialization of Untrusted Data	<0:3.3.10-11.el10_0.1
L Out-of-Bounds	*
H Deserialization of Untrusted Data	<0:3.3.10-12.el10_1
L Off-by-one Error	*
M Out-of-bounds Read	*
M Directory Traversal	*
M Information Exposure	*
M Improper Output Neutralization for Logs	*
M XML External Entity (XXE) Injection	*
M Out-of-bounds Read	*
M HTTP Request Smuggling	*
M Cryptographic Issues	*
M Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<0:3.3.10-11.el10_1
M Resource Exhaustion	<0:3.3.10-11.el10_1
M Improper Cross-boundary Removal of Sensitive Data	*
M Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<0:3.3.10-11.el10_0
M Resource Exhaustion	<0:3.3.10-11.el10_0
H Link Following	<0:3.3.10-11.el10_0
L Improper Cross-boundary Removal of Sensitive Data	<0:3.3.8-10.el10_0
M Allocation of Resources Without Limits or Throttling	<0:3.3.8-10.el10_0
M Allocation of Resources Without Limits or Throttling	<0:3.3.8-10.el10_0
M Allocation of Resources Without Limits or Throttling	*
L Allocation of Resources Without Limits or Throttling	*
L Allocation of Resources Without Limits or Throttling	*
M Covert Timing Channel	*
L Improper Input Validation	*
H Improper Certificate Validation	*
H Download of Code Without Integrity Check	*
M HTTP Request Smuggling	*
M Out-of-bounds Read	*
M Buffer Over-read	*
M Arbitrary Code Injection	*
M Inefficient Regular Expression Complexity	*

Vulnerability

Vulnerable Version

Allocation of Resources Without Limits or Throttling

<0:3.3.12-12.el10_0