rubygem-openssl vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the rubygem-openssl package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Inefficient Regular Expression Complexity	*
L Resource Exhaustion	*
M Arbitrary Code Injection	*
M Out-of-bounds Read	*
M Buffer Over-read	*
M Cross-site Scripting (XSS)	<0:2.0.9-90.el7cf
M Cross-site Scripting (XSS)	<0:2.0.9-90.el7cf
M Cross-site Scripting (XSS)	<0:2.0.9-90.el7cf
M Cross-site Scripting (XSS)	<0:2.0.9-90.el7cf
M XML External Entity (XXE) Injection	<0:2.0.9-90.el7cf
M XML External Entity (XXE) Injection	<0:2.0.9-90.el7cf
M Resource Exhaustion	<0:2.0.9-93.el7cf
M Resource Exhaustion	<0:2.0.9-93.el7cf
M Cross-site Scripting (XSS)	<0:2.0.9-90.el7cf
M Cross-site Scripting (XSS)	<0:2.0.9-90.el7cf
M HTTP Request Smuggling	*
H Improper Input Validation	<0:2.0.9-91.el7cf
H Improper Input Validation	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Directory Traversal	<0:2.0.9-91.el7cf
H Directory Traversal	<0:2.0.9-91.el7cf