pkg:Debian/rubygems

All known vulnerabilities

• CRITICAL9.8CVE-2018-1000076RubyGems Improper Verification of Cryptographic Signature vulnerability
  from 0, < 3.2.0~rc.1-1
• CRITICAL9.8CVE-2017-0903RubyGems vulnerable to Deserialization of Untrusted Data
  from 0, < 3.2.0~rc.1-1
• CRITICAL9.8RubyGems Code Injection vulnerability
  from 0, < 3.2.0~rc.1-1
• HIGH8.8Dependency Confusion in Bundler
  from 0
• HIGH8.8Code injection in RubyGems
  from 0, < 3.2.0~rc.1-1
• HIGH8.1RubyGems has Origin Validation Error vulnerability
  from 0, < 3.2.0~rc.1-1
• HIGH7.8jruby - security update
  from 0, < 3.2.0~rc.1-1
• HIGH7.5URI Credential Leakage Bypass over CVE-2025-27221
  from 0
• HIGH7.5ruby2.5 - security update
  from 0, < 3.2.5-2+deb11u1
• HIGH7.5rubygems - security update
  from 0, < 3.2.0~rc.1-1
• HIGH7.5rubygems - security update
  from 0, < 1.8.24-1+deb7u1
• HIGH7.5jruby - security update
  from 0, < 3.2.0~rc.1-1
• HIGH7.5jruby - security update
  from 0, < 1.8.24-1+deb7u2
• HIGH7.5RubyGems may allow a maliciously crafted gem to overwrite files
  from 0, < 3.2.0~rc.1-1
• HIGH7.5jruby - security update
  from 0, < 3.2.0~rc.1-1
• HIGH7.5RubyGems Escape sequence injection in errors
  from 0, < 3.2.0~rc.1-1
• HIGH7.5RubyGems Escape sequence injection vulnerability in verbose
  from 0, < 3.2.0~rc.1-1
• HIGH7.5RubyGems Escape sequence injection vulnerability in gem owner
  from 0, < 3.2.0~rc.1-1
• HIGH7.5RubyGems Escape sequence injection vulnerability in api response handling
  from 0, < 3.2.0~rc.1-1
• HIGH7.4ruby2.3 - security update
  from 0, < 3.2.0~rc.1-1
• MEDIUM6.7rubygems - security update
  from 0, < 3.2.5-2+deb11u1
• MEDIUM6.7rubygems - security update
  from 0, < 3.2.5-2+deb11u1
• MEDIUM6.1RubyGems Cross-site Scripting vulnerability
  from 0, < 3.2.0~rc.1-1
• MEDIUM5.5RubyGems Path Traversal vulnerability
  from 0, < 3.2.0~rc.1-1
• MEDIUM5.3RubyGems Improper Input Validation vulnerability
  from 0, < 3.2.0~rc.1-1
• LOW3.2URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+
  from 0, < 3.2.5-2+deb11u1
• —RubyGems HTTPS to HTTP redirect
  from 0, < 1.8.24-1
• —RubyGems does not verify SSL certificate
  from 0, < 1.8.24-1
• —RubyGems Regular Expression Denial of Service
  from 0, < 3.2.0~rc.1-1
• —RubyGems Regular Expression Denial of Service vulnerability
  from 0, < 3.2.0~rc.1-1