rubygem-openssl

Direct Vulnerabilities

Known vulnerabilities in the rubygem-openssl package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L Out-of-Bounds	*
M Covert Timing Channel	*
M Inefficient Regular Expression Complexity	*
L Allocation of Resources Without Limits or Throttling	*
M Arbitrary Code Injection	*
M Out-of-bounds Read	*
M Buffer Over-read	*
M Cross-site Scripting (XSS)	<0:2.0.9-90.el7cf
M Cross-site Scripting (XSS)	<0:2.0.9-90.el7cf
M Cross-site Scripting (XSS)	<0:2.0.9-90.el7cf
M Cross-site Scripting (XSS)	<0:2.0.9-90.el7cf
M XML External Entity (XXE) Injection	<0:2.0.9-90.el7cf
M XML External Entity (XXE) Injection	<0:2.0.9-90.el7cf
M Resource Exhaustion	<0:2.0.9-93.el7cf
M Resource Exhaustion	<0:2.0.9-93.el7cf
M Cross-site Scripting (XSS)	<0:2.0.9-90.el7cf
M Cross-site Scripting (XSS)	<0:2.0.9-90.el7cf
M HTTP Request Smuggling	*
H Improper Input Validation	<0:2.0.9-91.el7cf
H Improper Input Validation	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Arbitrary Argument Injection	<0:2.0.9-91.el7cf
H Directory Traversal	<0:2.0.9-91.el7cf
H Directory Traversal	<0:2.0.9-91.el7cf