Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Arbitrary Command InjectionCVE-2017-20156
Affects printer | Versions >=0.1.0
Has fix
RubyGemsPublished 1 Jan 2023
  • L
Cross-site Scripting (XSS)CVE-2019-25088
Affects oxidized-web | Versions <0.14.0
Has fix
RubyGemsPublished 28 Dec 2022
  • M
Incorrect Privilege AssignmentCVE-2020-36624
Affects text_helpers | Versions <1.1.0
Has fix
RubyGemsPublished 22 Dec 2022
  • L
Regular Expression Denial of Service (ReDoS)CVE-2021-4250
Affects active_attr | Versions <0.15.3
Has fix
RubyGemsPublished 19 Dec 2022
  • H
Uncontrolled RecursionCVE-2022-23516
Affects loofah | Versions >=2.2.0, <2.19.1
Has fix
RubyGemsPublished 14 Dec 2022
  • M
Cross-site Scripting (XSS)CVE-2022-23519
Affects rails-html-sanitizer | Versions <1.4.4
Has fix
RubyGemsPublished 14 Dec 2022
  • M
Cross-site Scripting (XSS)CVE-2022-23518
Affects rails-html-sanitizer | Versions >=1.0.3, <1.4.4
Has fix
RubyGemsPublished 14 Dec 2022
  • H
Regular Expression Denial of Service (ReDoS)CVE-2022-23517
Affects rails-html-sanitizer | Versions <1.4.4
Has fix
RubyGemsPublished 14 Dec 2022
  • H
Regular Expression Denial of Service (ReDoS)CVE-2022-23514
Affects loofah | Versions <2.19.1
Has fix
RubyGemsPublished 14 Dec 2022
  • M
Cross-site Scripting (XSS)CVE-2022-23520
Affects rails-html-sanitizer | Versions <1.4.4
Has fix
RubyGemsPublished 14 Dec 2022
  • M
Cross-site Scripting (XSS)CVE-2022-23515
Affects loofah | Versions >=2.1.0, <2.19.1
Has fix
RubyGemsPublished 14 Dec 2022
  • H
Denial of Service (DoS)CVE-2022-3510
Affects google-protobuf | Versions >=3.16.0, <3.19.6>=3.20.0-rc-1, <3.20.3>=3.21.0-rc-1, <3.21.7
Has fix
RubyGemsPublished 13 Dec 2022
  • H
Unchecked Return ValueCVE-2022-23476
Affects nokogiri | Versions >=1.13.8, <1.13.10
Has fix
RubyGemsPublished 8 Dec 2022
  • H
Resources Downloaded over Insecure ProtocolCVE-2022-45442
Affects sinatra | Versions <2.2.3>=3.0.0, <3.0.4
Has fix
RubyGemsPublished 29 Nov 2022
  • H
Improper Input ValidationCVE-2021-33621
Affects cgi | Versions <0.1.0.2>=0.2.1, <0.2.2>=0.3.3, <0.3.5
Has fix
RubyGemsPublished 20 Nov 2022
  • L
Improper NeutralizationCVE-2022-4064
Affects dalli | Versions <3.2.3
Has fix
RubyGemsPublished 20 Nov 2022
  • C
Integer Overflow or WraparoundCVE-2022-37454
Affects sha3 | Versions <1.0.5
Has fix
RubyGemsPublished 6 Nov 2022
  • L
Information ExposureCVE-2022-39379
Affects fluentd | Versions >=1.13.2, <1.15.3
Has fix
RubyGemsPublished 2 Nov 2022
  • H
NULL Pointer Dereference
Affects nokogiri | Versions <1.13.9
Has fix
RubyGemsPublished 19 Oct 2022
  • M
Denial of Service (DoS)
Affects sqlite3 | Versions >=1.5.0, <1.5.1
Has fix
RubyGemsPublished 19 Oct 2022
  • H
Privilege EscalationCVE-2022-42717
Affects vagrant | Versions >=0.0.0, <2.4.4
Has fix
RubyGemsPublished 12 Oct 2022
  • M
Denial of Service (DoS)CVE-2022-39281
Affects fat_free_crm | Versions <0.20.1
Has fix
RubyGemsPublished 9 Oct 2022
  • M
Denial of Service (DoS)CVE-2022-3171
Affects google-protobuf | Versions <3.16.3>=3.17.0.rc.1, <3.19.6>=3.20.0.rc.1, <3.20.3>=3.21.0.rc.1, <3.21.7
Has fix
RubyGemsPublished 5 Oct 2022
  • M
Heap-based Buffer OverflowCVE-2016-2338
Affects psych | Versions <2.0.17
Has fix
RubyGemsPublished 29 Sept 2022
  • M
Open Redirect
Affects actionpack | Versions >=7.0.3, <7.0.4
Has fix
RubyGemsPublished 28 Sept 2022
  • M
Improper Input Validation
Affects personnummer | Versions <3.0.1
Has fix
RubyGemsPublished 22 Sept 2022
  • H
Arbitrary Code ExecutionCVE-2022-39224
Affects arr-pm | Versions <0.0.12
Has fix
RubyGemsPublished 22 Sept 2022
  • M
Information Exposure
Affects pageflow | Versions <14.5.2>=15.0.0, <15.7.1
Has fix
RubyGemsPublished 15 Sept 2022
  • H
Authorization Bypass Through User-Controlled Key
Affects pageflow | Versions <14.5.2>=15.0.0, <15.7.1
Has fix
RubyGemsPublished 15 Sept 2022
  • C
Command InjectionCVE-2022-25765
Affects pdfkit | Versions <0.8.7.2
Has fix
RubyGemsPublished 8 Sept 2022