ruby4.0-default-gems

Direct Vulnerabilities

Known vulnerabilities in the ruby4.0-default-gems package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
Improper Validation of Integrity Check Value

<0:4.0.6-37.3.hum1
  • L
Buffer Access with Incorrect Length Value

<0:4.0.6-37.3.hum1
  • L
NULL Pointer Dereference

<0:4.0.6-37.3.hum1
  • L
Improper Validation of Integrity Check Value

<0:4.0.6-37.3.hum1
  • L
Information Exposure

<0:4.0.6-37.3.hum1
  • L
NULL Pointer Dereference

<0:4.0.6-37.3.hum1
  • L
Improper Verification of Cryptographic Signature

<0:4.0.6-37.3.hum1
  • L
NULL Pointer Dereference

<0:4.0.6-37.3.hum1
  • L
Improper Verification of Cryptographic Signature

<0:4.0.6-37.3.hum1
  • L
Integer Overflow or Wraparound

<0:4.0.6-37.3.hum1
  • L
Improper Certificate Validation

<0:4.0.6-37.3.hum1
  • L
Integer Overflow or Wraparound

<0:4.0.6-37.3.hum1
  • L
Incorrect Calculation of Buffer Size

<0:4.0.6-37.3.hum1
  • M
Improper Handling of Length Parameter Inconsistency

<0:4.0.6-37.3.hum1
  • M
NULL Pointer Dereference

<0:4.0.6-37.3.hum1
  • M
Allocation of Resources Without Limits or Throttling

<0:4.0.6-37.3.hum1
  • M
Generation of Weak Initialization Vector (IV)

<0:4.0.6-37.3.hum1
  • M
CVE-2026-35188

<0:4.0.6-37.3.hum1
  • H
Expired Pointer Dereference

<0:4.0.6-37.3.hum1
  • M
Improper Handling of Length Parameter Inconsistency

<0:4.0.6-37.2.hum1
  • H
Allocation of Resources Without Limits or Throttling

<0:4.0.6-37.2.hum1
  • H
Missing Release of Resource after Effective Lifetime

<0:4.0.6-37.2.hum1
  • H
OS Command Injection

<0:4.0.0-33.4.hum1
  • H
Use of Externally-Controlled Format String

<0:4.0.6-37.2.hum1
  • L
Out-of-bounds Write

<0:4.0.6-37.1.hum1
  • M
CRLF Injection

<0:4.0.0-33.4.hum1
  • M
CRLF Injection

<0:4.0.5-35.hum1
  • H
CRLF Injection

<0:4.0.5-35.hum1
  • M
Arbitrary Argument Injection

<0:4.0.0-33.4.hum1
  • M
Unchecked Input for Loop Condition

<0:4.0.0-33.4.hum1
  • H
Missing Required Cryptographic Step

<0:4.0.0-33.4.hum1
  • M
Unchecked Input for Loop Condition

<0:4.0.0-33.4.hum1
  • L
Improper Input Validation

<0:4.0.0-33.3.hum1
  • L
Cryptographic Issues

<0:4.0.0-33.3.hum1
  • L
Privilege Defined With Unsafe Actions

<0:4.0.0-33.3.hum1
  • M
Integer Overflow or Wraparound

<0:4.0.0-33.3.hum1
  • M
Integer Overflow or Wraparound

<0:4.0.0-33.3.hum1
  • L
Cryptographic Issues

<0:4.0.0-33.3.hum1
  • L
Privilege Defined With Unsafe Actions

<0:4.0.0-33.3.hum1
  • M
Integer Overflow or Wraparound

<0:4.0.0-33.3.hum1
  • M
Integer Overflow or Wraparound

<0:4.0.0-33.3.hum1
  • M
Numeric Errors

<0:4.0.0-33.3.hum1
  • L
Resource Management Errors

<0:4.0.0-33.3.hum1
  • M
Reliance on Cookies without Validation and Integrity Checking

<0:4.0.0-33.3.hum1
  • M
Out-of-bounds Read

<0:4.0.0-33.3.hum1
  • M
Improper Input Validation

<0:4.0.0-33.3.hum1
  • M
XML External Entity (XXE) Injection

<0:4.0.0-33.3.hum1
  • M
HTTP Request Smuggling

<0:4.0.0-33.3.hum1
  • L
Directory Traversal

<0:4.0.0-33.3.hum1
  • L
Arbitrary Argument Injection

<0:4.0.0-33.3.hum1
  • M
Incorrect Calculation of Buffer Size

<0:4.0.0-33.3.hum1
  • M
Improper Output Neutralization for Logs

<0:4.0.0-33.3.hum1
  • L
HTTP Response Splitting

<0:4.0.0-33.3.hum1
  • M
Out-of-bounds Read

<0:4.0.0-33.3.hum1
  • L
Information Exposure

<0:4.0.0-33.3.hum1
  • L
Improper Input Validation

<0:4.0.0-33.3.hum1
  • L
Off-by-one Error

<0:4.0.0-33.3.hum1
  • M
Information Exposure

<0:4.0.0-33.3.hum1
  • M
Directory Traversal

<0:4.0.0-33.3.hum1
  • M
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

<0:4.0.0-33.3.hum1
  • M
Improper Input Validation

<0:4.0.0-33.3.hum1
  • M
Cryptographic Issues

<0:4.0.0-33.3.hum1
  • M
Resource Management Errors

<0:4.0.0-33.3.hum1
  • M
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

<0:4.0.0-33.3.hum1
  • M
Improper Input Validation

<0:4.0.0-33.3.hum1
  • M
Improper Input Validation

<0:4.0.0-33.3.hum1
  • M
Access Restriction Bypass

<0:4.0.0-33.3.hum1
  • M
Improper Authentication

<0:4.0.0-33.3.hum1