Every CVE Search/ Get API key

CVE-2023-28755

Ruby URI component ReDoS issue

5.3 MediumFix available

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

2.64%Up 2.6 points since Mar 31, 2023
90%50%10%1%

What each source reports

NVD Score used 5.3

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

Record
CVE-2023-28755
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-1333
Updated
2026-11-02
CVE List 5.3

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

Record
CVE-2023-28755
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-1333
Updated
2026-11-02
EUVDEUVD-2023-1038 5.3

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

Record
EUVD-2023-1038
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-hv5j-3h9f-99c2 7.5

Ruby URI component ReDoS issue

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

Record
GHSA-hv5j-3h9f-99c2
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1333
Updated
2026-11-02
OSVALPINE-CVE-2023-28755 5.3

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

Record
ALPINE-CVE-2023-28755
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVBELL-CVE-2023-28755 5.3

CVE-2023-28755 does not affect BellSoft software

Record
BELL-CVE-2023-28755
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 35 moreShow less
OSV 5.3

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

Record
CVE-2023-28755
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVDEBIAN-CVE-2023-28755 5.3

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

Record
DEBIAN-CVE-2023-28755
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVGHSA-hv5j-3h9f-99c2 7.5

Ruby URI component ReDoS issue

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

Record
GHSA-hv5j-3h9f-99c2
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1333
Updated
2026-11-02
OSVOESA-2023-1226 7.5

ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).

Security Fix(es):

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.(CVE-2023-28756)

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.(CVE-2023-28755)

Record
OESA-2023-1226
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:3291 8.8

Red Hat Security Advisory: rh-ruby27-ruby security, bug fix, and enhancement update

Record
RHSA-2023:3291
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:3821 8.8

Red Hat Security Advisory: ruby:2.7 security, bug fix, and enhancement update

Record
RHSA-2023:3821
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:7025 8.8

Red Hat Security Advisory: ruby:2.5 security update

Record
RHSA-2023:7025
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:1431 8.8

Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update

Record
RHSA-2024:1431
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:1576 8.8

Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update

Record
RHSA-2024:1576
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3500 8.8

Red Hat Security Advisory: ruby:3.0 security update

Record
RHSA-2024:3500
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3838 8.8

Red Hat Security Advisory: ruby security update

Record
RHSA-2024:3838
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2023:3821 8.8

Moderate: ruby:2.7 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (2.7). (BZ#2189465)

Security Fix(es):

  • ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)

  • ruby: ReDoS vulnerability in URI (CVE-2023-28755)

  • ruby: ReDoS vulnerability in Time (CVE-2023-28756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:3821
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2023:7025 8.8

Moderate: ruby:2.5 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)

  • ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)

  • ruby: ReDoS vulnerability in URI (CVE-2023-28755)

  • ruby: ReDoS vulnerability in Time (CVE-2023-28756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.

Record
RLSA-2023:7025
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2024:1576 8.8

Moderate: ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.1). (Rocky Linux-29052)

Security Fix(es):

  • ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)

  • ruby: ReDoS vulnerability in URI (CVE-2023-28755)

  • ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)

  • ruby: ReDoS vulnerability in Time (CVE-2023-28756)

Bug Fix(es):

  • ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (Rocky Linux-29048)

  • ruby: Ruby cannot read private key in FIPS mode on Rocky Linux 9 (Rocky Linux-12437)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:1576
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-28755 5.3

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

Record
UBUNTU-CVE-2023-28755
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVALSA-2023:3821 No score

Moderate: ruby:2.7 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (2.7). (BZ#2189465)

Security Fix(es):

  • ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
  • ruby: ReDoS vulnerability in URI (CVE-2023-28755)
  • ruby: ReDoS vulnerability in Time (CVE-2023-28756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:3821
Updated
2026-11-02
OSVALSA-2023:7025 No score

Moderate: ruby:2.5 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
  • ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)
  • ruby: ReDoS vulnerability in URI (CVE-2023-28755)
  • ruby: ReDoS vulnerability in Time (CVE-2023-28756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:7025
Updated
2026-11-02
OSVALSA-2024:1431 No score

Moderate: ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.1). (AlmaLinux-28565)

Security Fix(es):

  • ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
  • ruby: ReDoS vulnerability in URI (CVE-2023-28755)
  • ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)
  • ruby: ReDoS vulnerability in Time (CVE-2023-28756)

Bug Fix(es):

  • ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (AlmaLinux-28569)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:1431
Updated
2026-11-02
OSVALSA-2024:1576 No score

Moderate: ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.1). (AlmaLinux-29052)

Security Fix(es):

  • ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
  • ruby: ReDoS vulnerability in URI (CVE-2023-28755)
  • ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)
  • ruby: ReDoS vulnerability in Time (CVE-2023-28756)

Bug Fix(es):

  • ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (AlmaLinux-29048)
  • ruby: Ruby cannot read private key in FIPS mode on AlmaLinux 9 (AlmaLinux-12437)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:1576
Updated
2026-11-02
OSVALSA-2024:3500 No score

Moderate: ruby:3.0 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
  • ruby: ReDoS vulnerability in URI (CVE-2023-28755)
  • ruby: ReDoS vulnerability in Time (CVE-2023-28756)
  • ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
  • ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
  • ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3500
Updated
2026-11-02
OSVALSA-2024:3838 No score

Moderate: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.0). (AlmaLinux-35740)

Security Fix(es):

  • ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
  • ruby: ReDoS vulnerability in URI (CVE-2023-28755)
  • ruby: ReDoS vulnerability in Time (CVE-2023-28756)
  • ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
  • ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
  • ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3838
Updated
2026-11-02
OSVALSA-2024:4499 No score

Moderate: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)
  • ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
  • ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
  • ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
  • REXML: DoS parsing an XML with many <s in an attribute value (CVE-2024-35176)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:4499
Updated
2026-11-02
OSVCLSA-2026-1779099998 No score

ruby: Fix of CVE-2023-28755

  • CVE-2023-28755: fix ReDoS in URI parser by converting greedy quantifiers to possessive quantifiers in RFC3986_URI and RFC3986_relative_ref
Record
CLSA-2026-1779099998
Updated
2026-11-02
OSVopenSUSE-SU-2024:12828-1 No score

libruby3_2-3_2-3.2.2-1.1 on GA media

These are all security issues fixed in the libruby3_2-3_2-3.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12828-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12849-1 No score

libruby3_1-3_1-3.1.4-1.1 on GA media

These are all security issues fixed in the libruby3_1-3_1-3.1.4-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12849-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13623-1 No score

libruby3_3-3_3-3.3.0-1.2 on GA media

These are all security issues fixed in the libruby3_3-3_3-3.3.0-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13623-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14621-1 No score

libruby3_4-3_4-3.4.1-1.1 on GA media

These are all security issues fixed in the libruby3_4-3_4-3.4.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14621-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15819-1 No score

libruby4_0-4_0-4.0.0~preview2-1.1 on GA media

These are all security issues fixed in the libruby4_0-4_0-4.0.0~preview2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15819-1
Updated
2026-11-02
OSVRLSA-2024:1431 No score

Moderate: ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.1). (Rocky Linux-28565)

Security Fix(es):

  • ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)

  • ruby: ReDoS vulnerability in URI (CVE-2023-28755)

  • ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)

  • ruby: ReDoS vulnerability in Time (CVE-2023-28756)

Bug Fix(es):

  • ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (Rocky Linux-28569)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:1431
Updated
2026-11-02
OSVSUSE-SU-2023:4176-1 No score

Security update for ruby2.5

This update for ruby2.5 fixes the following issues:

  • CVE-2023-28755: Fixed a ReDoS vulnerability in URI. (bsc#1209891)
  • CVE-2023-28756: Fixed an expensive regexp in the RFC2822 time parser. (bsc#1209967)
  • CVE-2021-41817: Fixed a Regular Expression Denial of Service Vulnerability of Date Parsing Methods. (bsc#1193035)
  • CVE-2021-33621: Fixed a HTTP response splitting vulnerability in CGI gem. (bsc#1205726)
Record
SUSE-SU-2023:4176-1
Updated
2026-11-02
OSVUSN-6055-1 No score

ruby2.3, ruby2.5, ruby2.7 vulnerabilities

It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-28755)

It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. This issue is being addressed only for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2023-28756)

Record
USN-6055-1
Updated
2026-11-02
OSVUSN-6055-2 No score

ruby2.3, ruby2.5, ruby2.7 regression

USN-6055-1 fixed a vulnerability in Ruby. Unfortunately it introduced a regression. This update reverts the patches applied to CVE-2023-28755 in order to fix the regression pending further investigation.

We apologize for the inconvenience.

Original advisory details:

It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-28755)

Record
USN-6055-2
Updated
2026-11-02
OSVUSN-6087-1 No score

ruby2.3, ruby2.5, ruby2.7 vulnerabilities

It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-28755)

It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possily use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 ESM. (CVE-2023-28756)

Record
USN-6087-1
Updated
2026-11-02
OSVUSN-6219-1 No score

ruby2.3, ruby2.5, ruby2.7, ruby3.0, ruby3.1 vulnerabilities

It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.10 and Ubuntu 20.04 LTS. (CVE-2023-28755)

It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. This issue exists because of an incomplete fix for CVE-2023-28755. (CVE-2023-36617)

Record
USN-6219-1
Updated
2026-11-02
OSVUSN-7735-1 No score

rubygems vulnerabilities

It was discovered that RubyGems incorrectly handled certain regular expressions. An attacker could use this issue to cause RubyGems to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-28755)

It was discovered that RubyGems incorrectly handled decompressed domain names within a DNS packet. An attacker could use this issue to cause RubyGems to crash, resulting in a denial of service. This issue only affected Ubuntu 25.04. (CVE-2025-24294)

Record
USN-7735-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
uri
RubyGems
 0.12.0 to 0.12.0
0.12.1
uri
RubyGems
 0.11.0 to 0.11.0
0.11.1
uri
RubyGems
 0.10.1 to 0.10.1
0.10.2
uri
RubyGems
 before 0.10.0.1
0.10.0.1
ruby
Alpine:v3.14
 before 2.7.8-r0
2.7.8-r0
ruby
Alpine:v3.15
 before 3.0.6-r0
3.0.6-r0
ruby
Alpine:v3.16
 before 3.1.4-r0
3.1.4-r0
ruby
Alpine:v3.17
 before 3.1.4-r0
3.1.4-r0
ruby
Alpine:v3.18
 before 3.1.4-r0
3.1.4-r0
ruby
Alpine:v3.19
 before 3.1.4-r0
3.1.4-r0
Show 290 moreShow less
Affected packages
PackageAffectedFixed
ruby
Alpine:v3.20
 before 3.1.4-r0
3.1.4-r0
ruby
Alpine:v3.21
 before 3.1.4-r0
3.1.4-r0
ruby
Alpine:v3.22
 before 3.1.4-r0
3.1.4-r0
ruby
Alpine:v3.23
 before 3.1.4-r0
3.1.4-r0
ruby
Alpine:v3.24
 before 3.1.4-r0
3.1.4-r0
ruby
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.7.8-139.module_el8.8.0+3578+2b4b06da
2.7.8-139.module_el8.8.0+3578+2b4b06da
ruby-default-gems
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.7.8-139.module_el8.8.0+3578+2b4b06da
2.7.8-139.module_el8.8.0+3578+2b4b06da
ruby-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.7.8-139.module_el8.8.0+3578+2b4b06da
2.7.8-139.module_el8.8.0+3578+2b4b06da
ruby-doc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.7.8-139.module_el8.8.0+3578+2b4b06da
2.7.8-139.module_el8.8.0+3578+2b4b06da
ruby-libs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.7.8-139.module_el8.8.0+3578+2b4b06da
2.7.8-139.module_el8.8.0+3578+2b4b06da
rubygem-abrt
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.4.0-1.module_el8.3.0+6147+d0dfc1e4
0.4.0-1.module_el8.3.0+6147+d0dfc1e4
rubygem-abrt-doc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.4.0-1.module_el8.3.0+6147+d0dfc1e4
0.4.0-1.module_el8.3.0+6147+d0dfc1e4
rubygem-bigdecimal
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.0.0-139.module_el8.8.0+3578+2b4b06da
2.0.0-139.module_el8.8.0+3578+2b4b06da
rubygem-bson
AlmaLinux:8
From an advisory covering 3 CVEs
 before 4.8.1-1.module_el8.5.0+117+35d1289b
4.8.1-1.module_el8.5.0+117+35d1289b
rubygem-bson
AlmaLinux:8
From an advisory covering 3 CVEs
 before 4.8.1-1.module_el8.6.0+3167+957ef55e
4.8.1-1.module_el8.6.0+3167+957ef55e
rubygem-bson
AlmaLinux:8
From an advisory covering 3 CVEs
 before 4.8.1-1.module_el8.4.0+2399+4e3a532a
4.8.1-1.module_el8.4.0+2399+4e3a532a
rubygem-bson
AlmaLinux:8
From an advisory covering 3 CVEs
 before 4.8.1-1.module_el8.3.0+6147+d0dfc1e4
4.8.1-1.module_el8.3.0+6147+d0dfc1e4
rubygem-bson-doc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 4.8.1-1.module_el8.3.0+6147+d0dfc1e4
4.8.1-1.module_el8.3.0+6147+d0dfc1e4
rubygem-bundler
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.2.24-139.module_el8.8.0+3578+2b4b06da
2.2.24-139.module_el8.8.0+3578+2b4b06da
rubygem-io-console
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.5.6-139.module_el8.8.0+3578+2b4b06da
0.5.6-139.module_el8.8.0+3578+2b4b06da
rubygem-irb
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.2.6-139.module_el8.8.0+3578+2b4b06da
1.2.6-139.module_el8.8.0+3578+2b4b06da
rubygem-json
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.3.0-139.module_el8.8.0+3578+2b4b06da
2.3.0-139.module_el8.8.0+3578+2b4b06da
rubygem-minitest
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.13.0-139.module_el8.8.0+3578+2b4b06da
5.13.0-139.module_el8.8.0+3578+2b4b06da
rubygem-mongo
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.11.3-1.module_el8.3.0+6147+d0dfc1e4
2.11.3-1.module_el8.3.0+6147+d0dfc1e4
rubygem-mongo-doc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.11.3-1.module_el8.3.0+6147+d0dfc1e4
2.11.3-1.module_el8.3.0+6147+d0dfc1e4
rubygem-mysql2
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.5.3-1.module_el8.4.0+2399+4e3a532a
0.5.3-1.module_el8.4.0+2399+4e3a532a
rubygem-mysql2
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.5.3-1.module_el8.3.0+6147+d0dfc1e4
0.5.3-1.module_el8.3.0+6147+d0dfc1e4
rubygem-mysql2
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.5.3-1.module_el8.6.0+3167+957ef55e
0.5.3-1.module_el8.6.0+3167+957ef55e
rubygem-mysql2
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.5.3-1.module_el8.5.0+117+35d1289b
0.5.3-1.module_el8.5.0+117+35d1289b
rubygem-mysql2-doc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.5.3-1.module_el8.3.0+6147+d0dfc1e4
0.5.3-1.module_el8.3.0+6147+d0dfc1e4
rubygem-net-telnet
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.2.0-139.module_el8.8.0+3578+2b4b06da
0.2.0-139.module_el8.8.0+3578+2b4b06da
rubygem-openssl
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.1.4-139.module_el8.8.0+3578+2b4b06da
2.1.4-139.module_el8.8.0+3578+2b4b06da
rubygem-pg
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.2.3-1.module_el8.3.0+6147+d0dfc1e4
1.2.3-1.module_el8.3.0+6147+d0dfc1e4
rubygem-pg
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.2.3-1.module_el8.5.0+117+35d1289b
1.2.3-1.module_el8.5.0+117+35d1289b
rubygem-pg
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.2.3-1.module_el8.4.0+2399+4e3a532a
1.2.3-1.module_el8.4.0+2399+4e3a532a
rubygem-pg
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.2.3-1.module_el8.6.0+3167+957ef55e
1.2.3-1.module_el8.6.0+3167+957ef55e
rubygem-pg-doc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.2.3-1.module_el8.3.0+6147+d0dfc1e4
1.2.3-1.module_el8.3.0+6147+d0dfc1e4
rubygem-power_assert
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.1.7-139.module_el8.8.0+3578+2b4b06da
1.1.7-139.module_el8.8.0+3578+2b4b06da
rubygem-psych
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.1.0-139.module_el8.8.0+3578+2b4b06da
3.1.0-139.module_el8.8.0+3578+2b4b06da
rubygem-rake
AlmaLinux:8
From an advisory covering 3 CVEs
 before 13.0.1-139.module_el8.8.0+3578+2b4b06da
13.0.1-139.module_el8.8.0+3578+2b4b06da
rubygem-rdoc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 6.2.1.1-139.module_el8.8.0+3578+2b4b06da
6.2.1.1-139.module_el8.8.0+3578+2b4b06da
rubygem-test-unit
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.3.4-139.module_el8.8.0+3578+2b4b06da
3.3.4-139.module_el8.8.0+3578+2b4b06da
rubygem-xmlrpc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.3.0-139.module_el8.8.0+3578+2b4b06da
0.3.0-139.module_el8.8.0+3578+2b4b06da
rubygems
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.1.6-139.module_el8.8.0+3578+2b4b06da
3.1.6-139.module_el8.8.0+3578+2b4b06da
rubygems-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.1.6-139.module_el8.8.0+3578+2b4b06da
3.1.6-139.module_el8.8.0+3578+2b4b06da
ruby
AlmaLinux:8
From an advisory covering 4 CVEs
 before 2.5.9-111.module_el8.9.0+3635+c6f99506
2.5.9-111.module_el8.9.0+3635+c6f99506
ruby-devel
AlmaLinux:8
From an advisory covering 4 CVEs
 before 2.5.9-111.module_el8.9.0+3635+c6f99506
2.5.9-111.module_el8.9.0+3635+c6f99506
ruby-doc
AlmaLinux:8
From an advisory covering 4 CVEs
 before 2.5.9-111.module_el8.9.0+3635+c6f99506
2.5.9-111.module_el8.9.0+3635+c6f99506
ruby-irb
AlmaLinux:8
From an advisory covering 4 CVEs
 before 2.5.9-111.module_el8.9.0+3635+c6f99506
2.5.9-111.module_el8.9.0+3635+c6f99506
ruby-libs
AlmaLinux:8
From an advisory covering 4 CVEs
 before 2.5.9-111.module_el8.9.0+3635+c6f99506
2.5.9-111.module_el8.9.0+3635+c6f99506
rubygem-abrt
AlmaLinux:8
From an advisory covering 4 CVEs
 before 0.3.0-4.module_el8.5.0+2625+ec418553
0.3.0-4.module_el8.5.0+2625+ec418553
rubygem-abrt-doc
AlmaLinux:8
From an advisory covering 4 CVEs
 before 0.3.0-4.module_el8.5.0+2625+ec418553
0.3.0-4.module_el8.5.0+2625+ec418553
rubygem-bigdecimal
AlmaLinux:8
From an advisory covering 4 CVEs
 before 1.3.4-111.module_el8.9.0+3635+c6f99506
1.3.4-111.module_el8.9.0+3635+c6f99506
rubygem-bson
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.3.0-2.module_el8.5.0+2625+ec418553
4.3.0-2.module_el8.5.0+2625+ec418553
rubygem-bson
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.3.0-2.module_el8.6.0+3170+4b08f9d4
4.3.0-2.module_el8.6.0+3170+4b08f9d4
rubygem-bson
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.3.0-2.module_el8.5.0+259+8cec6917
4.3.0-2.module_el8.5.0+259+8cec6917
rubygem-bson-doc
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.3.0-2.module_el8.5.0+2625+ec418553
4.3.0-2.module_el8.5.0+2625+ec418553
rubygem-bundler
AlmaLinux:8
From an advisory covering 4 CVEs
 before 1.16.1-4.module_el8.5.0+2625+ec418553
1.16.1-4.module_el8.5.0+2625+ec418553
rubygem-bundler-doc
AlmaLinux:8
From an advisory covering 4 CVEs
 before 1.16.1-4.module_el8.5.0+2625+ec418553
1.16.1-4.module_el8.5.0+2625+ec418553
rubygem-did_you_mean
AlmaLinux:8
From an advisory covering 4 CVEs
 before 1.2.0-111.module_el8.9.0+3635+c6f99506
1.2.0-111.module_el8.9.0+3635+c6f99506
rubygem-io-console
AlmaLinux:8
From an advisory covering 4 CVEs
 before 0.4.6-111.module_el8.9.0+3635+c6f99506
0.4.6-111.module_el8.9.0+3635+c6f99506
rubygem-json
AlmaLinux:8
From an advisory covering 4 CVEs
 before 2.1.0-111.module_el8.9.0+3635+c6f99506
2.1.0-111.module_el8.9.0+3635+c6f99506
rubygem-minitest
AlmaLinux:8
From an advisory covering 4 CVEs
 before 5.10.3-111.module_el8.9.0+3635+c6f99506
5.10.3-111.module_el8.9.0+3635+c6f99506
rubygem-mongo
AlmaLinux:8
From an advisory covering 4 CVEs
 before 2.5.1-2.module_el8.5.0+2625+ec418553
2.5.1-2.module_el8.5.0+2625+ec418553
rubygem-mongo-doc
AlmaLinux:8
From an advisory covering 4 CVEs
 before 2.5.1-2.module_el8.5.0+2625+ec418553
2.5.1-2.module_el8.5.0+2625+ec418553
rubygem-mysql2
AlmaLinux:8
From an advisory covering 4 CVEs
 before 0.4.10-4.module_el8.5.0+259+8cec6917
0.4.10-4.module_el8.5.0+259+8cec6917
rubygem-mysql2
AlmaLinux:8
From an advisory covering 4 CVEs
 before 0.4.10-4.module_el8.5.0+2625+ec418553
0.4.10-4.module_el8.5.0+2625+ec418553
rubygem-mysql2
AlmaLinux:8
From an advisory covering 4 CVEs
 before 0.4.10-4.module_el8.6.0+3170+4b08f9d4
0.4.10-4.module_el8.6.0+3170+4b08f9d4
rubygem-mysql2-doc
AlmaLinux:8
From an advisory covering 4 CVEs
 before 0.4.10-4.module_el8.5.0+2625+ec418553
0.4.10-4.module_el8.5.0+2625+ec418553
rubygem-net-telnet
AlmaLinux:8
From an advisory covering 4 CVEs
 before 0.1.1-111.module_el8.9.0+3635+c6f99506
0.1.1-111.module_el8.9.0+3635+c6f99506
rubygem-openssl
AlmaLinux:8
From an advisory covering 4 CVEs
 before 2.1.2-111.module_el8.9.0+3635+c6f99506
2.1.2-111.module_el8.9.0+3635+c6f99506
rubygem-pg
AlmaLinux:8
From an advisory covering 4 CVEs
 before 1.0.0-3.module_el8.9.0+3635+c6f99506
1.0.0-3.module_el8.9.0+3635+c6f99506
rubygem-pg-doc
AlmaLinux:8
From an advisory covering 4 CVEs
 before 1.0.0-3.module_el8.9.0+3635+c6f99506
1.0.0-3.module_el8.9.0+3635+c6f99506
rubygem-power_assert
AlmaLinux:8
From an advisory covering 4 CVEs
 before 1.1.1-111.module_el8.9.0+3635+c6f99506
1.1.1-111.module_el8.9.0+3635+c6f99506
rubygem-psych
AlmaLinux:8
From an advisory covering 4 CVEs
 before 3.0.2-111.module_el8.9.0+3635+c6f99506
3.0.2-111.module_el8.9.0+3635+c6f99506
rubygem-rake
AlmaLinux:8
From an advisory covering 4 CVEs
 before 12.3.3-111.module_el8.9.0+3635+c6f99506
12.3.3-111.module_el8.9.0+3635+c6f99506
rubygem-rdoc
AlmaLinux:8
From an advisory covering 4 CVEs
 before 6.0.1.1-111.module_el8.9.0+3635+c6f99506
6.0.1.1-111.module_el8.9.0+3635+c6f99506
rubygem-test-unit
AlmaLinux:8
From an advisory covering 4 CVEs
 before 3.2.7-111.module_el8.9.0+3635+c6f99506
3.2.7-111.module_el8.9.0+3635+c6f99506
rubygem-xmlrpc
AlmaLinux:8
From an advisory covering 4 CVEs
 before 0.3.0-111.module_el8.9.0+3635+c6f99506
0.3.0-111.module_el8.9.0+3635+c6f99506
rubygems
AlmaLinux:8
From an advisory covering 4 CVEs
 before 2.7.6.3-111.module_el8.9.0+3635+c6f99506
2.7.6.3-111.module_el8.9.0+3635+c6f99506
rubygems-devel
AlmaLinux:8
From an advisory covering 4 CVEs
 before 2.7.6.3-111.module_el8.9.0+3635+c6f99506
2.7.6.3-111.module_el8.9.0+3635+c6f99506
ruby
AlmaLinux:8
From an advisory covering 4 CVEs
 before 3.1.4-142.module_el8.9.0+3746+91b8233a
3.1.4-142.module_el8.9.0+3746+91b8233a
ruby-bundled-gems
AlmaLinux:8
From an advisory covering 4 CVEs
 before 3.1.4-142.module_el8.9.0+3746+91b8233a
3.1.4-142.module_el8.9.0+3746+91b8233a
ruby-default-gems
AlmaLinux:8
From an advisory covering 4 CVEs
 before 3.1.4-142.module_el8.9.0+3746+91b8233a
3.1.4-142.module_el8.9.0+3746+91b8233a
ruby-devel
AlmaLinux:8
From an advisory covering 4 CVEs
 before 3.1.4-142.module_el8.9.0+3746+91b8233a
3.1.4-142.module_el8.9.0+3746+91b8233a
ruby-doc
AlmaLinux:8
From an advisory covering 4 CVEs
 before 3.1.4-142.module_el8.9.0+3746+91b8233a
3.1.4-142.module_el8.9.0+3746+91b8233a
ruby-libs
AlmaLinux:8
From an advisory covering 4 CVEs
 before 3.1.4-142.module_el8.9.0+3746+91b8233a
3.1.4-142.module_el8.9.0+3746+91b8233a
rubygem-abrt
AlmaLinux:8
From an advisory covering 4 CVEs
 before 0.4.0-1.module_el8.7.0+3304+9392e77f
0.4.0-1.module_el8.7.0+3304+9392e77f
rubygem-abrt-doc
AlmaLinux:8
From an advisory covering 4 CVEs
 before 0.4.0-1.module_el8.7.0+3304+9392e77f
0.4.0-1.module_el8.7.0+3304+9392e77f
rubygem-bigdecimal
AlmaLinux:8
From an advisory covering 4 CVEs
 before 3.1.1-142.module_el8.9.0+3746+91b8233a
3.1.1-142.module_el8.9.0+3746+91b8233a
rubygem-bundler
AlmaLinux:8
From an advisory covering 4 CVEs
 before 2.3.26-142.module_el8.9.0+3746+91b8233a
2.3.26-142.module_el8.9.0+3746+91b8233a
rubygem-io-console
AlmaLinux:8
From an advisory covering 4 CVEs
 before 0.5.11-142.module_el8.9.0+3746+91b8233a
0.5.11-142.module_el8.9.0+3746+91b8233a
rubygem-irb
AlmaLinux:8
From an advisory covering 4 CVEs
 before 1.4.1-142.module_el8.9.0+3746+91b8233a
1.4.1-142.module_el8.9.0+3746+91b8233a
ruby
TuxCare:AlmaLinux:9.2
 before 3.0.4-160.el9_0.tuxcare.els13
3.0.4-160.el9_0.tuxcare.els13
ruby-default-gems
TuxCare:AlmaLinux:9.2
 before 3.0.4-160.el9_0.tuxcare.els13
3.0.4-160.el9_0.tuxcare.els13
ruby-devel
TuxCare:AlmaLinux:9.2
 before 3.0.4-160.el9_0.tuxcare.els13
3.0.4-160.el9_0.tuxcare.els13
ruby-doc
TuxCare:AlmaLinux:9.2
 before 3.0.4-160.el9_0.tuxcare.els13
3.0.4-160.el9_0.tuxcare.els13
ruby-libs
TuxCare:AlmaLinux:9.2
 before 3.0.4-160.el9_0.tuxcare.els13
3.0.4-160.el9_0.tuxcare.els13
rubygem-bigdecimal
TuxCare:AlmaLinux:9.2
 before 3.0.0-160.el9_0.tuxcare.els13
3.0.0-160.el9_0.tuxcare.els13
rubygem-bundler
TuxCare:AlmaLinux:9.2
 before 2.2.33-160.el9_0.tuxcare.els13
2.2.33-160.el9_0.tuxcare.els13
rubygem-io-console
TuxCare:AlmaLinux:9.2
 before 0.5.7-160.el9_0.tuxcare.els13
0.5.7-160.el9_0.tuxcare.els13
rubygem-irb
TuxCare:AlmaLinux:9.2
 before 1.3.5-160.el9_0.tuxcare.els13
1.3.5-160.el9_0.tuxcare.els13
rubygem-json
TuxCare:AlmaLinux:9.2
 before 2.5.1-160.el9_0.tuxcare.els13
2.5.1-160.el9_0.tuxcare.els13
rubygem-minitest
TuxCare:AlmaLinux:9.2
 before 5.14.2-160.el9_0.tuxcare.els13
5.14.2-160.el9_0.tuxcare.els13
rubygem-power_assert
TuxCare:AlmaLinux:9.2
 before 1.2.0-160.el9_0.tuxcare.els13
1.2.0-160.el9_0.tuxcare.els13
rubygem-psych
TuxCare:AlmaLinux:9.2
 before 3.3.2-160.el9_0.tuxcare.els13
3.3.2-160.el9_0.tuxcare.els13
rubygem-rake
TuxCare:AlmaLinux:9.2
 before 13.0.3-160.el9_0.tuxcare.els13
13.0.3-160.el9_0.tuxcare.els13
rubygem-rbs
TuxCare:AlmaLinux:9.2
 before 1.4.0-160.el9_0.tuxcare.els13
1.4.0-160.el9_0.tuxcare.els13
rubygem-rdoc
TuxCare:AlmaLinux:9.2
 before 6.3.3-160.el9_0.tuxcare.els13
6.3.3-160.el9_0.tuxcare.els13
rubygem-rexml
TuxCare:AlmaLinux:9.2
 before 3.3.3-160.el9_0.tuxcare.els13
3.3.3-160.el9_0.tuxcare.els13
rubygem-rss
TuxCare:AlmaLinux:9.2
 before 0.2.9-160.el9_0.tuxcare.els13
0.2.9-160.el9_0.tuxcare.els13
rubygem-test-unit
TuxCare:AlmaLinux:9.2
 before 3.3.7-160.el9_0.tuxcare.els13
3.3.7-160.el9_0.tuxcare.els13
rubygem-typeprof
TuxCare:AlmaLinux:9.2
 before 0.15.2-160.el9_0.tuxcare.els13
0.15.2-160.el9_0.tuxcare.els13
rubygems
TuxCare:AlmaLinux:9.2
 before 3.2.33-160.el9_0.tuxcare.els13
3.2.33-160.el9_0.tuxcare.els13
rubygems-devel
TuxCare:AlmaLinux:9.2
 before 3.2.33-160.el9_0.tuxcare.els13
3.2.33-160.el9_0.tuxcare.els13
jruby
Debian:12
 All versions, plus listed versions
10.1.1.0+ds-1~exp110.1.1.0+ds-1~exp210.1.2.0+ds-19.3.9.0+ds-89.4.12.0+ds-1~exp1
Show 11 moreShow less
9.4.14.0+ds-19.4.14.0+ds-1~exp19.4.3.0+ds-1~exp19.4.3.0+ds-1~exp29.4.5.0+ds-19.4.5.0+ds-1~exp19.4.6.0+ds-19.4.6.0+ds-1.19.4.8.0+ds-19.4.8.0+ds-29.4.8.0+ds-3
 None known
jruby
Debian:13
 before 9.4.5.0+ds-1
9.4.5.0+ds-1
jruby
Debian:14
 before 9.4.5.0+ds-1
9.4.5.0+ds-1
ruby3.1
Debian:12
 All versions, plus listed versions
3.1.2-73.1.2-7+deb12u13.1.2-7+hurd.13.1.2-83.1.2-8.1~exp13.1.2-8.33.1.2-8.43.1.2-8.5
 None known
rubygems
Debian:12
 before 3.3.15-2+deb12u1, plus listed versions
3.3.15-2
3.3.15-2+deb12u1
rubygems
Debian:13
 before 3.4.20-1
3.4.20-1
rubygems
Debian:14
 before 3.4.20-1
3.4.20-1
jruby
Debian:10
From an advisory covering 9 CVEs
 before 9.1.17.0-3+deb10u1, plus listed versions
9.1.17.0-3
9.1.17.0-3+deb10u1
ruby2.5
Debian:10
From an advisory covering 2 CVEs
 before 2.5.5-3+deb10u5, plus listed versions
2.5.5-32.5.5-3+deb10u12.5.5-3+deb10u22.5.5-3+deb10u32.5.5-3+deb10u4
2.5.5-3+deb10u5
ruby2.7
Debian:11
From an advisory covering 8 CVEs
 before 2.7.4-1+deb11u2, plus listed versions
2.7.4-12.7.4-1+deb11u1
2.7.4-1+deb11u2
rubygems
Debian:11
From an advisory covering 3 CVEs
 before 3.2.5-2+deb11u1, plus listed versions
3.2.5-2
3.2.5-2+deb11u1
uri
RubyGems
 0.12.0 up to 0.12.1
0.12.1
uri
RubyGems
 0.11.0 up to 0.11.1
0.11.1
uri
RubyGems
 0.10.1 up to 0.10.2
0.10.2
uri
RubyGems
 before 0.10.0.1, plus listed versions
0.10.0
0.10.0.1
ruby
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
 before 2.5.8-119.oe1
2.5.8-119.oe1
ruby
openEuler:20.03-LTS-SP3
From an advisory covering 2 CVEs
 before 2.5.8-119.oe1
2.5.8-119.oe1
ruby
openEuler:22.03-LTS
From an advisory covering 2 CVEs
 before 3.0.3-129.oe2203sp1
3.0.3-129.oe2203sp1
ruby
openEuler:22.03-LTS-SP1
From an advisory covering 2 CVEs
 before 3.0.3-129.oe2203sp1
3.0.3-129.oe2203sp1
rh-ruby27-ruby
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:2.7.8-132.el7
0:2.7.8-132.el7
rh-ruby27-ruby-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:2.7.8-132.el7
0:2.7.8-132.el7
rh-ruby27-ruby-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:2.7.8-132.el7
0:2.7.8-132.el7
rh-ruby27-ruby-doc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:2.7.8-132.el7
0:2.7.8-132.el7
rh-ruby27-ruby-libs
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:2.7.8-132.el7
0:2.7.8-132.el7
rh-ruby27-rubygem-bigdecimal
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:2.0.0-132.el7
0:2.0.0-132.el7
rh-ruby27-rubygem-bundler
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:2.2.24-132.el7
0:2.2.24-132.el7
rh-ruby27-rubygem-did_you_mean
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:1.4.0-132.el7
0:1.4.0-132.el7
rh-ruby27-rubygem-io-console
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:0.5.6-132.el7
0:0.5.6-132.el7
rh-ruby27-rubygem-irb
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:1.2.6-132.el7
0:1.2.6-132.el7
rh-ruby27-rubygem-json
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:2.3.0-132.el7
0:2.3.0-132.el7
rh-ruby27-rubygem-minitest
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:5.13.0-132.el7
0:5.13.0-132.el7
rh-ruby27-rubygem-net-telnet
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:0.2.0-132.el7
0:0.2.0-132.el7
rh-ruby27-rubygem-openssl
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:2.1.4-132.el7
0:2.1.4-132.el7
rh-ruby27-rubygem-power_assert
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:1.1.7-132.el7
0:1.1.7-132.el7
rh-ruby27-rubygem-psych
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:3.1.0-132.el7
0:3.1.0-132.el7
rh-ruby27-rubygem-racc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:1.4.16-132.el7
0:1.4.16-132.el7
rh-ruby27-rubygem-rake
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:13.0.1-132.el7
0:13.0.1-132.el7
rh-ruby27-rubygem-rdoc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:6.2.1.1-132.el7
0:6.2.1.1-132.el7
rh-ruby27-rubygem-test-unit
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:3.3.4-132.el7
0:3.3.4-132.el7
rh-ruby27-rubygem-xmlrpc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:0.3.0-132.el7
0:0.3.0-132.el7
rh-ruby27-rubygems
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:3.1.6-132.el7
0:3.1.6-132.el7
rh-ruby27-rubygems-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 3 CVEs
 before 0:3.1.6-132.el7
0:3.1.6-132.el7
ruby
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.7.8-139.module+el8.8.0+18745+f1bef313
0:2.7.8-139.module+el8.8.0+18745+f1bef313
ruby-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.7.8-139.module+el8.8.0+18745+f1bef313
0:2.7.8-139.module+el8.8.0+18745+f1bef313
ruby-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.7.8-139.module+el8.8.0+18745+f1bef313
0:2.7.8-139.module+el8.8.0+18745+f1bef313
ruby-default-gems
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.7.8-139.module+el8.8.0+18745+f1bef313
0:2.7.8-139.module+el8.8.0+18745+f1bef313
ruby-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.7.8-139.module+el8.8.0+18745+f1bef313
0:2.7.8-139.module+el8.8.0+18745+f1bef313
ruby-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.7.8-139.module+el8.8.0+18745+f1bef313
0:2.7.8-139.module+el8.8.0+18745+f1bef313
ruby-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.7.8-139.module+el8.8.0+18745+f1bef313
0:2.7.8-139.module+el8.8.0+18745+f1bef313
ruby-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.7.8-139.module+el8.8.0+18745+f1bef313
0:2.7.8-139.module+el8.8.0+18745+f1bef313
rubygem-abrt
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.4.0-1.module+el8.3.0+7192+4e3a532a
0:0.4.0-1.module+el8.3.0+7192+4e3a532a
rubygem-abrt-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.4.0-1.module+el8.3.0+7192+4e3a532a
0:0.4.0-1.module+el8.3.0+7192+4e3a532a
rubygem-bigdecimal
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.0-139.module+el8.8.0+18745+f1bef313
0:2.0.0-139.module+el8.8.0+18745+f1bef313
rubygem-bigdecimal-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.0-139.module+el8.8.0+18745+f1bef313
0:2.0.0-139.module+el8.8.0+18745+f1bef313
rubygem-bson
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:4.8.1-1.module+el8.3.0+7192+4e3a532a
0:4.8.1-1.module+el8.3.0+7192+4e3a532a
rubygem-bson-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:4.8.1-1.module+el8.3.0+7192+4e3a532a
0:4.8.1-1.module+el8.3.0+7192+4e3a532a
rubygem-bson-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:4.8.1-1.module+el8.3.0+7192+4e3a532a
0:4.8.1-1.module+el8.3.0+7192+4e3a532a
rubygem-bson-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:4.8.1-1.module+el8.3.0+7192+4e3a532a
0:4.8.1-1.module+el8.3.0+7192+4e3a532a
rubygem-bundler
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.2.24-139.module+el8.8.0+18745+f1bef313
0:2.2.24-139.module+el8.8.0+18745+f1bef313
rubygem-io-console
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.5.6-139.module+el8.8.0+18745+f1bef313
0:0.5.6-139.module+el8.8.0+18745+f1bef313
rubygem-io-console-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.5.6-139.module+el8.8.0+18745+f1bef313
0:0.5.6-139.module+el8.8.0+18745+f1bef313
rubygem-irb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.2.6-139.module+el8.8.0+18745+f1bef313
0:1.2.6-139.module+el8.8.0+18745+f1bef313
rubygem-json
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.3.0-139.module+el8.8.0+18745+f1bef313
0:2.3.0-139.module+el8.8.0+18745+f1bef313
rubygem-json-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.3.0-139.module+el8.8.0+18745+f1bef313
0:2.3.0-139.module+el8.8.0+18745+f1bef313
rubygem-minitest
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.13.0-139.module+el8.8.0+18745+f1bef313
0:5.13.0-139.module+el8.8.0+18745+f1bef313
rubygem-mongo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.11.3-1.module+el8.3.0+7192+4e3a532a
0:2.11.3-1.module+el8.3.0+7192+4e3a532a
rubygem-mongo-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.11.3-1.module+el8.3.0+7192+4e3a532a
0:2.11.3-1.module+el8.3.0+7192+4e3a532a
rubygem-mysql2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.5.3-1.module+el8.3.0+7192+4e3a532a
0:0.5.3-1.module+el8.3.0+7192+4e3a532a
rubygem-mysql2-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.5.3-1.module+el8.3.0+7192+4e3a532a
0:0.5.3-1.module+el8.3.0+7192+4e3a532a
rubygem-mysql2-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.5.3-1.module+el8.3.0+7192+4e3a532a
0:0.5.3-1.module+el8.3.0+7192+4e3a532a
rubygem-mysql2-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.5.3-1.module+el8.3.0+7192+4e3a532a
0:0.5.3-1.module+el8.3.0+7192+4e3a532a
rubygem-net-telnet
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.2.0-139.module+el8.8.0+18745+f1bef313
0:0.2.0-139.module+el8.8.0+18745+f1bef313
rubygem-openssl
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.1.4-139.module+el8.8.0+18745+f1bef313
0:2.1.4-139.module+el8.8.0+18745+f1bef313
rubygem-openssl-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.1.4-139.module+el8.8.0+18745+f1bef313
0:2.1.4-139.module+el8.8.0+18745+f1bef313
rubygem-pg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.2.3-1.module+el8.3.0+7192+4e3a532a
0:1.2.3-1.module+el8.3.0+7192+4e3a532a
rubygem-pg-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.2.3-1.module+el8.3.0+7192+4e3a532a
0:1.2.3-1.module+el8.3.0+7192+4e3a532a
rubygem-pg-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.2.3-1.module+el8.3.0+7192+4e3a532a
0:1.2.3-1.module+el8.3.0+7192+4e3a532a
rubygem-pg-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.2.3-1.module+el8.3.0+7192+4e3a532a
0:1.2.3-1.module+el8.3.0+7192+4e3a532a
rubygem-power_assert
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.1.7-139.module+el8.8.0+18745+f1bef313
0:1.1.7-139.module+el8.8.0+18745+f1bef313
rubygem-psych
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.0-139.module+el8.8.0+18745+f1bef313
0:3.1.0-139.module+el8.8.0+18745+f1bef313
rubygem-psych-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.0-139.module+el8.8.0+18745+f1bef313
0:3.1.0-139.module+el8.8.0+18745+f1bef313
rubygem-rake
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:13.0.1-139.module+el8.8.0+18745+f1bef313
0:13.0.1-139.module+el8.8.0+18745+f1bef313
rubygem-rdoc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.2.1.1-139.module+el8.8.0+18745+f1bef313
0:6.2.1.1-139.module+el8.8.0+18745+f1bef313
rubygem-test-unit
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.3.4-139.module+el8.8.0+18745+f1bef313
0:3.3.4-139.module+el8.8.0+18745+f1bef313
rubygem-xmlrpc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.3.0-139.module+el8.8.0+18745+f1bef313
0:0.3.0-139.module+el8.8.0+18745+f1bef313
rubygems
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.6-139.module+el8.8.0+18745+f1bef313
0:3.1.6-139.module+el8.8.0+18745+f1bef313
rubygems-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.6-139.module+el8.8.0+18745+f1bef313
0:3.1.6-139.module+el8.8.0+18745+f1bef313
ruby
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:2.5.9-111.module+el8.9.0+19193+435404ae
0:2.5.9-111.module+el8.9.0+19193+435404ae
ruby-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:2.5.9-111.module+el8.9.0+19193+435404ae
0:2.5.9-111.module+el8.9.0+19193+435404ae
ruby-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:2.5.9-111.module+el8.9.0+19193+435404ae
0:2.5.9-111.module+el8.9.0+19193+435404ae
ruby-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:2.5.9-111.module+el8.9.0+19193+435404ae
0:2.5.9-111.module+el8.9.0+19193+435404ae
ruby-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:2.5.9-111.module+el8.9.0+19193+435404ae
0:2.5.9-111.module+el8.9.0+19193+435404ae
ruby-irb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:2.5.9-111.module+el8.9.0+19193+435404ae
0:2.5.9-111.module+el8.9.0+19193+435404ae
ruby-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:2.5.9-111.module+el8.9.0+19193+435404ae
0:2.5.9-111.module+el8.9.0+19193+435404ae
ruby-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:2.5.9-111.module+el8.9.0+19193+435404ae
0:2.5.9-111.module+el8.9.0+19193+435404ae
rubygem-abrt
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:0.3.0-4.module+el8.9.0+19193+435404ae
0:0.3.0-4.module+el8.9.0+19193+435404ae
rubygem-abrt-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:0.3.0-4.module+el8.9.0+19193+435404ae
0:0.3.0-4.module+el8.9.0+19193+435404ae
rubygem-bigdecimal
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:1.3.4-111.module+el8.9.0+19193+435404ae
0:1.3.4-111.module+el8.9.0+19193+435404ae
rubygem-bigdecimal-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:1.3.4-111.module+el8.9.0+19193+435404ae
0:1.3.4-111.module+el8.9.0+19193+435404ae
rubygem-bson
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:4.3.0-2.module+el8.9.0+19193+435404ae
0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bson-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:4.3.0-2.module+el8.9.0+19193+435404ae
0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bson-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:4.3.0-2.module+el8.9.0+19193+435404ae
0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bson-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:4.3.0-2.module+el8.9.0+19193+435404ae
0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bundler
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:1.16.1-4.module+el8.9.0+19193+435404ae
0:1.16.1-4.module+el8.9.0+19193+435404ae
rubygem-bundler-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:1.16.1-4.module+el8.9.0+19193+435404ae
0:1.16.1-4.module+el8.9.0+19193+435404ae
rubygem-did_you_mean
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:1.2.0-111.module+el8.9.0+19193+435404ae
0:1.2.0-111.module+el8.9.0+19193+435404ae
rubygem-io-console
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:0.4.6-111.module+el8.9.0+19193+435404ae
0:0.4.6-111.module+el8.9.0+19193+435404ae
ruby
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:2.7.8-139.module+el8.8.0+1320+d2449f6f
0:2.7.8-139.module+el8.8.0+1320+d2449f6f
rubygem-abrt
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:0.4.0-1.module+el8.5.0+668+665814fa
0:0.4.0-1.module+el8.5.0+668+665814fa
rubygem-bson
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:4.8.1-1.module+el8.4.0+594+11b6673a
0:4.8.1-1.module+el8.4.0+594+11b6673a
rubygem-mongo
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:2.11.3-1.module+el8.4.0+594+11b6673a
0:2.11.3-1.module+el8.4.0+594+11b6673a
rubygem-mysql2
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:0.5.3-1.module+el8.5.0+668+665814fa
0:0.5.3-1.module+el8.5.0+668+665814fa
rubygem-pg
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:1.2.3-1.module+el8.5.0+668+665814fa
0:1.2.3-1.module+el8.5.0+668+665814fa
rubygem-mongo
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:2.5.1-2.module+el8.9.0+1536+5f79634e
0:2.5.1-2.module+el8.9.0+1536+5f79634e
rubygem-mysql2
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:0.4.10-4.module+el8.9.0+1536+5f79634e
0:0.4.10-4.module+el8.9.0+1536+5f79634e
ruby
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:2.5.9-111.module+el8.9.0+1536+5f79634e
0:2.5.9-111.module+el8.9.0+1536+5f79634e
rubygem-abrt
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:0.3.0-4.module+el8.9.0+1536+5f79634e
0:0.3.0-4.module+el8.9.0+1536+5f79634e
rubygem-abrt
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:0.3.0-4.module+el8.5.0+738+032c9c02
0:0.3.0-4.module+el8.5.0+738+032c9c02
rubygem-bson
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:4.3.0-2.module+el8.9.0+1536+5f79634e
0:4.3.0-2.module+el8.9.0+1536+5f79634e
rubygem-bundler
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:1.16.1-4.module+el8.9.0+1536+5f79634e
0:1.16.1-4.module+el8.9.0+1536+5f79634e
rubygem-pg
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:1.0.0-3.module+el8.9.0+1536+5f79634e
0:1.0.0-3.module+el8.9.0+1536+5f79634e
ruby
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:3.1.4-142.module+el8.9.0+1759+ff68ae72
0:3.1.4-142.module+el8.9.0+1759+ff68ae72
rubygem-abrt
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:0.4.0-1.module+el8.5.0+668+665814fa
0:0.4.0-1.module+el8.5.0+668+665814fa
rubygem-mysql2
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:0.5.3-3.module+el8.9.0+1759+ff68ae72
0:0.5.3-3.module+el8.9.0+1759+ff68ae72
rubygem-pg
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:1.3.2-1.module+el8.7.0+1081+f0a69743
0:1.3.2-1.module+el8.7.0+1081+f0a69743
rubygem-mysql2
Rocky Linux:9
From an advisory covering 4 CVEs
 before 0:0.5.4-1.module+el9.6.0+31865+0893c253
0:0.5.4-1.module+el9.6.0+31865+0893c253
rubygem-pg
Rocky Linux:9
From an advisory covering 4 CVEs
 before 0:1.3.5-1.module+el9.6.0+31865+0893c253
0:1.3.5-1.module+el9.6.0+31865+0893c253
ruby2.5
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
SUSE:Manager Proxy 4.2
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
SUSE:Manager Server 4.2
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
SUSE:Enterprise Storage 7.1
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
openSUSE:Leap 15.4
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.5
openSUSE:Leap 15.5
From an advisory covering 4 CVEs
 before 2.5.9-150000.4.29.1
2.5.9-150000.4.29.1
ruby2.3
Ubuntu:Pro:16.04:LTS
 before 2.3.1-2~ubuntu16.04.16+esm7, plus listed versions
2.3.0-12.3.0-22.3.0-4ubuntu22.3.0-4ubuntu32.3.0-5ubuntu1
Show 20 moreShow less
2.3.1-2~16.042.3.1-2~16.04.22.3.1-2~16.04.42.3.1-2~16.04.52.3.1-2~16.04.62.3.1-2~16.04.72.3.1-2~16.04.92.3.1-2~16.04.102.3.1-2~16.04.112.3.1-2~16.04.122.3.1-2~ubuntu16.04.132.3.1-2~ubuntu16.04.142.3.1-2~ubuntu16.04.152.3.1-2~ubuntu16.04.162.3.1-2~ubuntu16.04.16+esm12.3.1-2~ubuntu16.04.16+esm22.3.1-2~ubuntu16.04.16+esm32.3.1-2~ubuntu16.04.16+esm42.3.1-2~ubuntu16.04.16+esm52.3.1-2~ubuntu16.04.16+esm6
2.3.1-2~ubuntu16.04.16+esm7
jruby
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.7.21-2ubuntu41.7.22-1ubuntu1
 None known
ruby2.5
Ubuntu:18.04:LTS
 before 2.5.1-1ubuntu1.16, plus listed versions
2.5.0~preview1-1ubuntu22.5.0-4ubuntu12.5.0-4ubuntu42.5.0-5ubuntu12.5.0-6ubuntu1
Show 15 moreShow less
2.5.1-1ubuntu12.5.1-1ubuntu1.12.5.1-1ubuntu1.22.5.1-1ubuntu1.42.5.1-1ubuntu1.52.5.1-1ubuntu1.62.5.1-1ubuntu1.72.5.1-1ubuntu1.82.5.1-1ubuntu1.92.5.1-1ubuntu1.102.5.1-1ubuntu1.112.5.1-1ubuntu1.122.5.1-1ubuntu1.132.5.1-1ubuntu1.142.5.1-1ubuntu1.15
2.5.1-1ubuntu1.16
jruby
Ubuntu:18.04:LTS
 All versions, plus listed versions
9.1.13.0-19.1.17.0-1~18.04
 None known
ruby2.7
Ubuntu:20.04:LTS
 before 2.7.0-5ubuntu1.11, plus listed versions
2.7.0-12.7.0-22.7.0-32.7.0-42.7.0-4ubuntu1
Show 11 moreShow less
2.7.0-5ubuntu12.7.0-5ubuntu1.12.7.0-5ubuntu1.22.7.0-5ubuntu1.32.7.0-5ubuntu1.42.7.0-5ubuntu1.52.7.0-5ubuntu1.62.7.0-5ubuntu1.72.7.0-5ubuntu1.82.7.0-5ubuntu1.92.7.0-5ubuntu1.10
2.7.0-5ubuntu1.11
jruby
Ubuntu:20.04:LTS
 All versions, plus listed versions
9.1.17.0-39.1.17.0-3build59.1.17.0-3build6
 None known
ruby3.0
Ubuntu:22.04:LTS
 before 3.0.2-7ubuntu2.4, plus listed versions
3.0.2-5ubuntu13.0.2-73.0.2-7ubuntu23.0.2-7ubuntu2.13.0.2-7ubuntu2.23.0.2-7ubuntu2.3
3.0.2-7ubuntu2.4
rubygems
Ubuntu:22.04:LTS
 before 3.3.5-2ubuntu1.1, plus listed versions
3.2.5-23.2.27-23.2.27-33.3.5-2
3.3.5-2ubuntu1.1
jruby
Ubuntu:24.04:LTS
 All versions, plus listed versions
9.3.9.0+ds-19.4.5.0+ds-19.4.5.0+ds-1ubuntu19.4.6.0+ds-1ubuntu3
 None known
jruby
Ubuntu:25.10
 All versions, plus listed versions
9.4.8.0+ds-2ubuntu19.4.8.0+ds-3ubuntu1
 None known
jruby
Ubuntu:26.10
 All versions, plus listed versions
9.4.8.0+ds-3ubuntu19.4.14.0+ds-1
 None known
jruby
Ubuntu:26.04:LTS
 All versions, plus listed versions
9.4.8.0+ds-3ubuntu1
 None known
ruby2.3
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 2.3.1-2~ubuntu16.04.16+esm5, plus listed versions
2.3.0-12.3.0-22.3.0-4ubuntu22.3.0-4ubuntu32.3.0-5ubuntu1
Show 18 moreShow less
2.3.1-2~16.042.3.1-2~16.04.22.3.1-2~16.04.42.3.1-2~16.04.52.3.1-2~16.04.62.3.1-2~16.04.72.3.1-2~16.04.92.3.1-2~16.04.102.3.1-2~16.04.112.3.1-2~16.04.122.3.1-2~ubuntu16.04.132.3.1-2~ubuntu16.04.142.3.1-2~ubuntu16.04.152.3.1-2~ubuntu16.04.162.3.1-2~ubuntu16.04.16+esm12.3.1-2~ubuntu16.04.16+esm22.3.1-2~ubuntu16.04.16+esm32.3.1-2~ubuntu16.04.16+esm4
2.3.1-2~ubuntu16.04.16+esm5
ruby2.5
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 2.5.1-1ubuntu1.14, plus listed versions
2.5.0~preview1-1ubuntu22.5.0-4ubuntu12.5.0-4ubuntu42.5.0-5ubuntu12.5.0-6ubuntu1
Show 13 moreShow less
2.5.1-1ubuntu12.5.1-1ubuntu1.12.5.1-1ubuntu1.22.5.1-1ubuntu1.42.5.1-1ubuntu1.52.5.1-1ubuntu1.62.5.1-1ubuntu1.72.5.1-1ubuntu1.82.5.1-1ubuntu1.92.5.1-1ubuntu1.102.5.1-1ubuntu1.112.5.1-1ubuntu1.122.5.1-1ubuntu1.13
2.5.1-1ubuntu1.14
ruby2.7
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 2.7.0-5ubuntu1.9, plus listed versions
2.7.0-12.7.0-22.7.0-32.7.0-42.7.0-4ubuntu1
Show 9 moreShow less
2.7.0-5ubuntu12.7.0-5ubuntu1.12.7.0-5ubuntu1.22.7.0-5ubuntu1.32.7.0-5ubuntu1.42.7.0-5ubuntu1.52.7.0-5ubuntu1.62.7.0-5ubuntu1.72.7.0-5ubuntu1.8
2.7.0-5ubuntu1.9
ruby2.3
Ubuntu:Pro:16.04:LTS
 before 2.3.1-2~ubuntu16.04.16+esm6, plus listed versions
2.3.0-12.3.0-22.3.0-4ubuntu22.3.0-4ubuntu32.3.0-5ubuntu1
Show 19 moreShow less
2.3.1-2~16.042.3.1-2~16.04.22.3.1-2~16.04.42.3.1-2~16.04.52.3.1-2~16.04.62.3.1-2~16.04.72.3.1-2~16.04.92.3.1-2~16.04.102.3.1-2~16.04.112.3.1-2~16.04.122.3.1-2~ubuntu16.04.132.3.1-2~ubuntu16.04.142.3.1-2~ubuntu16.04.152.3.1-2~ubuntu16.04.162.3.1-2~ubuntu16.04.16+esm12.3.1-2~ubuntu16.04.16+esm22.3.1-2~ubuntu16.04.16+esm32.3.1-2~ubuntu16.04.16+esm42.3.1-2~ubuntu16.04.16+esm5
2.3.1-2~ubuntu16.04.16+esm6
ruby2.5
Ubuntu:18.04:LTS
 before 2.5.1-1ubuntu1.15, plus listed versions
2.5.0~preview1-1ubuntu22.5.0-4ubuntu12.5.0-4ubuntu42.5.0-5ubuntu12.5.0-6ubuntu1
Show 14 moreShow less
2.5.1-1ubuntu12.5.1-1ubuntu1.12.5.1-1ubuntu1.22.5.1-1ubuntu1.42.5.1-1ubuntu1.52.5.1-1ubuntu1.62.5.1-1ubuntu1.72.5.1-1ubuntu1.82.5.1-1ubuntu1.92.5.1-1ubuntu1.102.5.1-1ubuntu1.112.5.1-1ubuntu1.122.5.1-1ubuntu1.132.5.1-1ubuntu1.14
2.5.1-1ubuntu1.15
ruby2.7
Ubuntu:20.04:LTS
 before 2.7.0-5ubuntu1.10, plus listed versions
2.7.0-12.7.0-22.7.0-32.7.0-42.7.0-4ubuntu1
Show 10 moreShow less
2.7.0-5ubuntu12.7.0-5ubuntu1.12.7.0-5ubuntu1.22.7.0-5ubuntu1.32.7.0-5ubuntu1.42.7.0-5ubuntu1.52.7.0-5ubuntu1.62.7.0-5ubuntu1.72.7.0-5ubuntu1.82.7.0-5ubuntu1.9
2.7.0-5ubuntu1.10
ruby2.3
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 2.3.1-2~ubuntu16.04.16+esm7, plus listed versions
2.3.0-12.3.0-22.3.0-4ubuntu22.3.0-4ubuntu32.3.0-5ubuntu1
Show 20 moreShow less
2.3.1-2~16.042.3.1-2~16.04.22.3.1-2~16.04.42.3.1-2~16.04.52.3.1-2~16.04.62.3.1-2~16.04.72.3.1-2~16.04.92.3.1-2~16.04.102.3.1-2~16.04.112.3.1-2~16.04.122.3.1-2~ubuntu16.04.132.3.1-2~ubuntu16.04.142.3.1-2~ubuntu16.04.152.3.1-2~ubuntu16.04.162.3.1-2~ubuntu16.04.16+esm12.3.1-2~ubuntu16.04.16+esm22.3.1-2~ubuntu16.04.16+esm32.3.1-2~ubuntu16.04.16+esm42.3.1-2~ubuntu16.04.16+esm52.3.1-2~ubuntu16.04.16+esm6
2.3.1-2~ubuntu16.04.16+esm7
ruby2.5
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 2.5.1-1ubuntu1.16, plus listed versions
2.5.0~preview1-1ubuntu22.5.0-4ubuntu12.5.0-4ubuntu42.5.0-5ubuntu12.5.0-6ubuntu1
Show 15 moreShow less
2.5.1-1ubuntu12.5.1-1ubuntu1.12.5.1-1ubuntu1.22.5.1-1ubuntu1.42.5.1-1ubuntu1.52.5.1-1ubuntu1.62.5.1-1ubuntu1.72.5.1-1ubuntu1.82.5.1-1ubuntu1.92.5.1-1ubuntu1.102.5.1-1ubuntu1.112.5.1-1ubuntu1.122.5.1-1ubuntu1.132.5.1-1ubuntu1.142.5.1-1ubuntu1.15
2.5.1-1ubuntu1.16
ruby2.7
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 2.7.0-5ubuntu1.11, plus listed versions
2.7.0-12.7.0-22.7.0-32.7.0-42.7.0-4ubuntu1
Show 11 moreShow less
2.7.0-5ubuntu12.7.0-5ubuntu1.12.7.0-5ubuntu1.22.7.0-5ubuntu1.32.7.0-5ubuntu1.42.7.0-5ubuntu1.52.7.0-5ubuntu1.62.7.0-5ubuntu1.72.7.0-5ubuntu1.82.7.0-5ubuntu1.92.7.0-5ubuntu1.10
2.7.0-5ubuntu1.11
ruby2.3
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 2.3.1-2~ubuntu16.04.16+esm8, plus listed versions
2.3.0-12.3.0-22.3.0-4ubuntu22.3.0-4ubuntu32.3.0-5ubuntu1
Show 21 moreShow less
2.3.1-2~16.042.3.1-2~16.04.22.3.1-2~16.04.42.3.1-2~16.04.52.3.1-2~16.04.62.3.1-2~16.04.72.3.1-2~16.04.92.3.1-2~16.04.102.3.1-2~16.04.112.3.1-2~16.04.122.3.1-2~ubuntu16.04.132.3.1-2~ubuntu16.04.142.3.1-2~ubuntu16.04.152.3.1-2~ubuntu16.04.162.3.1-2~ubuntu16.04.16+esm12.3.1-2~ubuntu16.04.16+esm22.3.1-2~ubuntu16.04.16+esm32.3.1-2~ubuntu16.04.16+esm42.3.1-2~ubuntu16.04.16+esm52.3.1-2~ubuntu16.04.16+esm62.3.1-2~ubuntu16.04.16+esm7
2.3.1-2~ubuntu16.04.16+esm8
ruby2.5
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 2.5.1-1ubuntu1.16+esm1, plus listed versions
2.5.0~preview1-1ubuntu22.5.0-4ubuntu12.5.0-4ubuntu42.5.0-5ubuntu12.5.0-6ubuntu1
Show 16 moreShow less
2.5.1-1ubuntu12.5.1-1ubuntu1.12.5.1-1ubuntu1.22.5.1-1ubuntu1.42.5.1-1ubuntu1.52.5.1-1ubuntu1.62.5.1-1ubuntu1.72.5.1-1ubuntu1.82.5.1-1ubuntu1.92.5.1-1ubuntu1.102.5.1-1ubuntu1.112.5.1-1ubuntu1.122.5.1-1ubuntu1.132.5.1-1ubuntu1.142.5.1-1ubuntu1.152.5.1-1ubuntu1.16
2.5.1-1ubuntu1.16+esm1
ruby2.7
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 2.7.0-5ubuntu1.12, plus listed versions
2.7.0-12.7.0-22.7.0-32.7.0-42.7.0-4ubuntu1
Show 12 moreShow less
2.7.0-5ubuntu12.7.0-5ubuntu1.12.7.0-5ubuntu1.22.7.0-5ubuntu1.32.7.0-5ubuntu1.42.7.0-5ubuntu1.52.7.0-5ubuntu1.62.7.0-5ubuntu1.72.7.0-5ubuntu1.82.7.0-5ubuntu1.92.7.0-5ubuntu1.102.7.0-5ubuntu1.11
2.7.0-5ubuntu1.12
ruby3.0
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 3.0.2-7ubuntu2.4, plus listed versions
3.0.2-5ubuntu13.0.2-73.0.2-7ubuntu23.0.2-7ubuntu2.13.0.2-7ubuntu2.23.0.2-7ubuntu2.3
3.0.2-7ubuntu2.4
rubygems
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 3.3.5-2ubuntu1.1, plus listed versions
3.2.5-23.2.27-23.2.27-33.3.5-2
3.3.5-2ubuntu1.1
ruby3.2
openSUSE:Tumbleweed
 before 3.2.2-1.1
3.2.2-1.1
ruby3.1
openSUSE:Tumbleweed
 before 3.1.4-1.1
3.1.4-1.1
ruby3.3
openSUSE:Tumbleweed
From an advisory covering 12 CVEs
 before 3.3.0-1.2
3.3.0-1.2
ruby3.4
openSUSE:Tumbleweed
From an advisory covering 12 CVEs
 before 3.4.1-1.1
3.4.1-1.1
ruby4.0
openSUSE:Tumbleweed
From an advisory covering 12 CVEs
 before 4.0.0~preview2-1.1
4.0.0~preview2-1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-28755 is a medium vulnerability (CVSS 5.3) in Ruby-lang Uri, published March 31, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.64%, the 85th percentile. Fixed in uri 0.12.1.

References

Show 134 moreShow less
This page doesn't list everything

Left out here: 309 package rows. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open