Homepage
About Snyk

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Expand this section

APPLICATION

Expand this section

OPERATING SYSTEM

Report a new vulnerability
VULNERABILITY AFFECTS TYPE PUBLISHED
  • M
Regular Expression Denial of Service (ReDoS) 		fluentd >=0.14.14, <1.14.2. RubyGems 31 Oct 2021
  • M
Cross-site Scripting (XSS) 		rails <3.0.6 RubyGems 20 Oct 2021
  • H
Always-Incorrect Control Flow Implementation 		evm <0.31.0 RubyGems 20 Oct 2021
  • M
Cross-site Scripting (XSS) 		camaleon_cms <2.6.0.1 RubyGems 20 Oct 2021
  • M
Denial of Service (DoS) 		camaleon_cms >=2.0.1, <2.6.0.1 RubyGems 20 Oct 2021
  • H
Insufficient Session Expiration 		camaleon_cms >=0.1.7, <2.6.0.1 RubyGems 20 Oct 2021
  • M
Server-Side Request Forgery (SSRF) 		camaleon_cms >=2.1.2.0, <2.6.0.1 RubyGems 20 Oct 2021
  • L
HTTP Request Smuggling 		puma <4.3.9 >=5.0.0, <5.5.1 RubyGems 13 Oct 2021
  • M
HTTP Request Smuggling 		llhttp >=0.0.0 RubyGems 13 Oct 2021
  • M
HTTP Request Smuggling 		llhttp >=0.0.0 RubyGems 13 Oct 2021
  • M
Cross-site Scripting (XSS) 		sidekiq <5.2.0 >=6.0.0, <6.2.1 RubyGems 8 Oct 2021
  • H
Arbitrary Code Execution 		ruby-jss <1.6.0 RubyGems 8 Oct 2021
  • H
XML External Entity (XXE) Injection 		nokogiri <1.12.5 RubyGems 28 Sep 2021
  • M
Denial of Service (DoS) 		nokogiri <1.8.2 RubyGems 8 Sep 2021
  • M
Cross-site Request Forgery (CSRF) 		better_errors <2.8.0 RubyGems 8 Sep 2021
  • H
Open Redirect 		clearance <2.5.0 RubyGems 31 Aug 2021
  • H
Open Redirect 		rails >=6.1.0, <6.1.4.1 >=6.0.0, <6.0.4.1 RubyGems 20 Aug 2021
  • H
Command Injection 		rdoc <6.3.1 RubyGems 8 Jul 2021
  • H
Regular Expression Denial of Service (ReDoS) 		addressable >=2.3.0, <2.8.0 RubyGems 7 Jul 2021
  • M
Cross-site Scripting (XSS) 		smashing <1.3.5 RubyGems 7 Jul 2021
  • C
SQL Injection 		activerecord-jdbc-adapter >=1.2.6, <1.2.8 RubyGems 2 Jul 2021
  • M
Directory Traversal 		webrick <1.4.0.beta1 RubyGems 1 Jul 2021
  • C
Improper Input Validation 		webrick <1.4.0.beta1 RubyGems 1 Jul 2021
  • H
Arbitrary Code Injection 		narou <3.8.0 RubyGems 28 Jun 2021
  • H
Data Injection 		activerecord >=2.3.2, <4.0.0.beta1 RubyGems 25 Jun 2021
  • L
Denial of Service (DoS) 		bindata <2.4.10 RubyGems 24 Jun 2021
  • M
Cross-site Scripting (XSS) 		qiita-markdown <0.34.0 RubyGems 21 Jun 2021
  • M
Improper Authorization 		foreman_ansible <2.0.0 RubyGems 10 Jun 2021
  • M
Information Exposure 		foreman_fog_proxmox <0.13.1 RubyGems 8 Jun 2021
  • H
Arbitrary Code Execution 		dragonfly <1.4.0 RubyGems 30 May 2021