ruby4.0-bundled-gems

Direct Vulnerabilities

Known vulnerabilities in the ruby4.0-bundled-gems package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Improper Input Validation	<0:4.0.0-33.3.hum1
M Reliance on Cookies without Validation and Integrity Checking	<0:4.0.0-33.3.hum1
M Out-of-bounds Read	<0:4.0.0-33.3.hum1
M Information Exposure	<0:4.0.0-33.3.hum1
M XML External Entity (XXE) Injection	<0:4.0.0-33.3.hum1
L Information Exposure	<0:4.0.0-33.3.hum1
L Arbitrary Argument Injection	<0:4.0.0-33.3.hum1
L Privilege Defined With Unsafe Actions	<0:4.0.0-33.3.hum1
L Off-by-one Error	<0:4.0.0-33.3.hum1
L Improper Input Validation	<0:4.0.0-33.3.hum1
L Privilege Defined With Unsafe Actions	<0:4.0.0-33.3.hum1
L Cryptographic Issues	<0:4.0.0-33.3.hum1
M Improper Handling of Length Parameter Inconsistency	<0:4.0.6-37.2.hum1
M CRLF Injection	<0:4.0.0-33.4.hum1
M Arbitrary Argument Injection	<0:4.0.0-33.4.hum1
M Unchecked Input for Loop Condition	<0:4.0.0-33.4.hum1
M Unchecked Input for Loop Condition	<0:4.0.0-33.4.hum1
M CRLF Injection	<0:4.0.5-35.hum1
M Incorrect Calculation of Buffer Size	<0:4.0.0-33.3.hum1
M Out-of-bounds Read	<0:4.0.0-33.3.hum1
M Improper Output Neutralization for Logs	<0:4.0.0-33.3.hum1
M Improper Input Validation	<0:4.0.0-33.3.hum1
M Improper Input Validation	<0:4.0.0-33.3.hum1
H Missing Required Cryptographic Step	<0:4.0.0-33.4.hum1
H Use of Externally-Controlled Format String	<0:4.0.6-37.2.hum1
H CRLF Injection	<0:4.0.5-35.hum1
L HTTP Response Splitting	<0:4.0.0-33.3.hum1
M Directory Traversal	<0:4.0.0-33.3.hum1
M HTTP Request Smuggling	<0:4.0.0-33.3.hum1
M Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<0:4.0.0-33.3.hum1
M Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<0:4.0.0-33.3.hum1
C Integer Overflow or Wraparound	<0:4.0.9-41.hum1
C Integer Overflow or Wraparound	<0:4.0.9-41.hum1
C Double Free	<0:4.0.9-41.hum1
C Integer Overflow or Wraparound	<0:4.0.9-41.hum1
L Out-of-bounds Write	<0:4.0.6-37.1.hum1
H OS Command Injection	<0:4.0.0-33.4.hum1
H Missing Release of Resource after Effective Lifetime	<0:4.0.6-37.2.hum1
H Allocation of Resources Without Limits or Throttling	<0:4.0.6-37.2.hum1
L Improper Validation of Integrity Check Value	<0:4.0.6-37.3.hum1
L Buffer Access with Incorrect Length Value	<0:4.0.6-37.3.hum1
L NULL Pointer Dereference	<0:4.0.6-37.3.hum1
L Improper Validation of Integrity Check Value	<0:4.0.6-37.3.hum1
L Information Exposure	<0:4.0.6-37.3.hum1
L NULL Pointer Dereference	<0:4.0.6-37.3.hum1
L Improper Verification of Cryptographic Signature	<0:4.0.6-37.3.hum1
L NULL Pointer Dereference	<0:4.0.6-37.3.hum1
L Improper Verification of Cryptographic Signature	<0:4.0.6-37.3.hum1
L Integer Overflow or Wraparound	<0:4.0.6-37.3.hum1
L Improper Certificate Validation	<0:4.0.6-37.3.hum1
L Integer Overflow or Wraparound	<0:4.0.6-37.3.hum1
L Incorrect Calculation of Buffer Size	<0:4.0.6-37.3.hum1
M Improper Handling of Length Parameter Inconsistency	<0:4.0.6-37.3.hum1
M NULL Pointer Dereference	<0:4.0.6-37.3.hum1
M Allocation of Resources Without Limits or Throttling	<0:4.0.6-37.3.hum1
M Generation of Weak Initialization Vector (IV)	<0:4.0.6-37.3.hum1
M CVE-2026-35188	<0:4.0.6-37.3.hum1
H Expired Pointer Dereference	<0:4.0.6-37.3.hum1

Vulnerability

Vulnerable Version

Improper Input Validation

<0:4.0.0-33.3.hum1