Homepage
About Snyk

rubygems-update vulnerabilities

  • licenses detected

    • (Ruby OR MIT)
      >=1.8.26, <2.0.0.preview2; >=2.0.7
    • MIT
      >=0.8.3, <1.8.24; >=2.0.6, <2.0.7
    • Unknown
      >=1.8.24, <1.8.26; >=2.0.0.preview2, <2.0.6
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the rubygems-update package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Deserialization of Untrusted Data

>=2.0.0, <2.6.14
  • H
Denial of Service (DoS)

<0.9.1
  • H
Directory Traversal

>=2.7.6, <2.7.9 >=3.0.0, <3.0.3
  • H
Arbitrary Code Injection

>=2.6.0, <2.7.9 >=3.0.0, <3.0.2
  • H
Arbitrary Code Injection

>=2.6.0, <2.7.9 >=3.0.0, <3.0.3
  • H
Arbitrary Code Injection

>=2.6.0, <2.7.9 >=3.0.0, <3.0.3
  • M
Man-in-the-Middle (MitM)

<1.8.23
  • M
Directory Traversal

<2.7.6
  • H
Man-in-the-Middle (MitM)

<2.6.13
  • H
Arbitrary Code Execution

<2.7.8 >=3.0.0, <3.0.3
  • H
Directory Traversal

<2.7.6
  • H
Arbitrary Code Execution

<2.6.13
  • H
Denial of Service (DoS)

<2.6.13
  • H
Infinite Loop

<2.7.6
  • M
DNS Hijack Attack

>=2.0.0, <2.0.17 >=2.2.0, <2.2.5 >=2.4.0, <2.4.8
  • M
Man-in-the-Middle (MitM)

<1.8.23
  • H
Deserialization of Untrusted Data

<2.7.6
  • C
Improper Verification of Cryptographic Signature

<2.7.6
  • M
Cross-site Scripting (XSS)

<2.7.6
  • M
Improper Input Validation

<2.7.6
  • H
Out-of-Bounds

<2.7.8 >=3.0.0, <3.0.3
  • M
Regular Expression Denial of Service (ReDoS)

<1.8.23.2 >=1.8.24, <1.8.27 >=2.0.0, <2.0.10 >=2.1.0, <2.1.5
  • C
Arbitrary Code Injection

<2.6.13