See the full list of npm packages compromised in the "Antv Supply Chain Compromise - May 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- L
HTTP Request SmugglingCVE-2021-41136
Affects puma | Versions <4.3.9>=5.0.0, <5.5.1
Has fix
RubyGemsPublished 13 Oct 2021
- M
HTTP Request SmugglingCVE-2021-22959
Affects llhttp | Versions >=0.0.0
Has fix
RubyGemsPublished 13 Oct 2021
- M
HTTP Request SmugglingCVE-2021-22960
Affects llhttp | Versions >=0.0.0
Has fix
RubyGemsPublished 13 Oct 2021
- M
Cross-site Scripting (XSS)CVE-2021-30151
Affects sidekiq | Versions <5.2.0>=6.0.0, <6.2.1
Has fix
RubyGemsPublished 8 Oct 2021
- H
Arbitrary Code ExecutionCVE-2021-33575
Affects ruby-jss | Versions <1.6.0
Has fix
RubyGemsPublished 8 Oct 2021
- H
XML External Entity (XXE) InjectionCVE-2021-41098
Affects nokogiri | Versions <1.12.5
Has fix
RubyGemsPublished 28 Sept 2021
- M
Denial of Service (DoS)CVE-2017-18258
Affects nokogiri | Versions <1.8.2
Has fix
RubyGemsPublished 8 Sept 2021
- M
Cross-site Request Forgery (CSRF)CVE-2021-39197
Affects better_errors | Versions <2.8.0
Has fix
RubyGemsPublished 8 Sept 2021
- H
Open RedirectCVE-2021-23435
Affects clearance | Versions <2.5.0
Has fix
RubyGemsPublished 31 Aug 2021
- H
Open RedirectCVE-2021-22942
Affects rails | Versions >=6.1.0, <6.1.4.1>=6.0.0, <6.0.4.1
Has fix
RubyGemsPublished 20 Aug 2021
- H
Regular Expression Denial of Service (ReDoS)CVE-2021-32740
Affects addressable | Versions >=2.3.0, <2.8.0
Has fix
RubyGemsPublished 7 Jul 2021
- M
Cross-site Scripting (XSS)CVE-2021-35440
Affects smashing | Versions <1.3.5
Has fix
RubyGemsPublished 7 Jul 2021
Affects activerecord-jdbc-adapter | Versions >=1.2.6, <1.2.8
Has fix
RubyGemsPublished 2 Jul 2021
- M
Directory TraversalCVE-2008-1891
Affects webrick | Versions <1.4.0.beta1
Has fix
RubyGemsPublished 1 Jul 2021
- C
Improper Input ValidationCVE-2009-4492
Affects webrick | Versions <1.4.0.beta1
Has fix
RubyGemsPublished 1 Jul 2021
- H
Arbitrary Code InjectionCVE-2021-35514
Affects narou | Versions <3.8.0
Has fix
RubyGemsPublished 28 Jun 2021
- H
Data InjectionCVE-2013-3221
Affects activerecord | Versions >=2.3.2, <4.0.0.beta1
Has fix
RubyGemsPublished 25 Jun 2021
- L
Denial of Service (DoS)CVE-2021-32823
Affects bindata | Versions <2.4.10
Has fix
RubyGemsPublished 24 Jun 2021
- M
Cross-site Scripting (XSS)CVE-2021-28833
Affects qiita-markdown | Versions <0.34.0
Has fix
RubyGemsPublished 21 Jun 2021
- M
Improper AuthorizationCVE-2021-3589
Affects foreman_ansible | Versions <2.0.0
Has fix
RubyGemsPublished 10 Jun 2021
- M
Information ExposureCVE-2021-20259
Affects foreman_fog_proxmox | Versions <0.13.1
Has fix
RubyGemsPublished 8 Jun 2021
- H
Arbitrary Code ExecutionCVE-2021-33564
Affects dragonfly | Versions <1.4.0
Has fix
RubyGemsPublished 30 May 2021
- H
Arbitrary Code ExecutionCVE-2021-33473
Affects dragonfly | Versions <1.4.0
Has fix
RubyGemsPublished 30 May 2021
- M
Information ExposureCVE-2020-10716
Affects foreman_ansible | Versions <4.0.3.4
Has fix
RubyGemsPublished 28 May 2021
- C
Arbitrary Code ExecutionCVE-2021-33575
Affects ruby-jss | Versions <1.6.0
Has fix
RubyGemsPublished 26 May 2021
- H
Denial of Service (DoS)CVE-2019-20388
Affects nokogiri | Versions <1.11.4
Has fix
RubyGemsPublished 18 May 2021
- H
Denial of Service (DoS)CVE-2021-3518
Affects nokogiri | Versions <1.11.4
Has fix
RubyGemsPublished 18 May 2021
- H
Denial of Service (DoS)CVE-2021-3541
Affects nokogiri | Versions <1.11.4
Has fix
RubyGemsPublished 18 May 2021
- H
Denial of Service (DoS)CVE-2021-3537
Affects nokogiri | Versions <1.11.4
Has fix
RubyGemsPublished 18 May 2021