{"id":"CVE-2019-16255","aliases":["ALPINE-CVE-2019-16255","ALSA-2021:2587","ALSA-2021:2588","BELL-CVE-2019-16255","DEBIAN-CVE-2019-16255","DLA-2007-1","DLA-2027-1","DLA-2330-1","DLA-3408-1","DSA-4586-1","DSA-4587-1","EUVD-2019-7061","GHSA-ph7w-p94x-9vvw","MGASA-2019-0408","MGASA-2020-0440","RHSA-2021:2104","RHSA-2021:2230","RHSA-2021:2587","RHSA-2021:2588","RHSA-2022:0581","RHSA-2022:0582","RLSA-2021:2587","RLSA-2021:2588","SUSE-SU-2020:0737-1","SUSE-SU-2020:1570-1","UBUNTU-CVE-2019-16255","USN-4201-1","openSUSE-SU-2020:0395-1"],"status":"published","title":"Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the...","description":"Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the \"command\" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04187,"percentile":0.90994,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-94"],"published":"2019-11-20T00:00:00Z","modified":"2026-11-02T09:30:05Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"ruby","fixed_in":["2.5.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"ruby","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"ruby","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"ruby","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"ruby","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"ruby","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"ruby","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"ruby","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"ruby","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"ruby","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"ruby","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"ruby","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ruby","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ruby","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ruby","fixed_in":["2.6.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"ruby","fixed_in":["2.4.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"ruby","fixed_in":["2.5.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"ruby","fixed_in":["2.5.7-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"jruby","fixed_in":["9.3.9.0+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"jruby","fixed_in":["9.3.9.0+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"jruby","fixed_in":["9.3.9.0+ds-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"jruby","fixed_in":["1.5.6-9+deb8u2build0.14.04.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"ruby2.3","fixed_in":["2.3.1-2~ubuntu16.04.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"ruby2.5","fixed_in":["2.5.1-1ubuntu1.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.5.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.6.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.5.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.5.7-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-4.module_el8.5.0+2625+ec418553"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-4.module_el8.5.0+259+8cec6917"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-4.module_el8.5.0+2623+08a8ba32"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-4.module_el8.5.0+259+8cec6917"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-4.module_el8.5.0+2623+08a8ba32"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-4.module_el8.5.0+2625+ec418553"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-2.module_el8.5.0+2625+ec418553"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-2.module_el8.5.0+259+8cec6917"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-bson-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-2.module_el8.5.0+2625+ec418553"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-bson-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-2.module_el8.5.0+259+8cec6917"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-2.module_el8.5.0+259+8cec6917"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-2.module_el8.5.0+2625+ec418553"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mongo-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-2.module_el8.5.0+2625+ec418553"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mongo-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-2.module_el8.5.0+259+8cec6917"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.10-4.module_el8.5.0+259+8cec6917"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.10-4.module_el8.5.0+2625+ec418553"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.10-4.module_el8.5.0+2625+ec418553"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.10-4.module_el8.5.0+259+8cec6917"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-2.module_el8.5.0+2625+ec418553"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-2.module_el8.5.0+259+8cec6917"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-2.module_el8.5.0+2625+ec418553"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-2.module_el8.5.0+259+8cec6917"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-4.module_el8.5.0+259+8cec6917"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-4.module_el8.5.0+2623+08a8ba32"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-4.module_el8.5.0+259+8cec6917"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-4.module_el8.5.0+2623+08a8ba32"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-1.module_el8.5.0+2623+08a8ba32"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-1.module_el8.5.0+250+ba22dbf7"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-bson-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-1.module_el8.5.0+250+ba22dbf7"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-bson-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-1.module_el8.5.0+2623+08a8ba32"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.5.0+250+ba22dbf7"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.5.0+2623+08a8ba32"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mongo-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.5.0+250+ba22dbf7"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mongo-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.5.0+2623+08a8ba32"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-1.module_el8.5.0+250+ba22dbf7"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-1.module_el8.5.0+2623+08a8ba32"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-1.module_el8.5.0+250+ba22dbf7"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-1.module_el8.5.0+2623+08a8ba32"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-1.module_el8.5.0+250+ba22dbf7"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-1.module_el8.5.0+2623+08a8ba32"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-1.module_el8.5.0+2623+08a8ba32"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-1.module_el8.5.0+250+ba22dbf7"}]}],"bundled":9},{"source":"osv","ecosystem":"Debian:12","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.9.0+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.9.0+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.9.0+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.5-2+deb8u8"}]}],"versions":["2.1.5-2","2.1.5-2+deb8u1","2.1.5-2+deb8u2","2.1.5-2+deb8u3","2.1.5-2+deb8u4","2.1.5-2+deb8u5","2.1.5-2+deb8u6","2.1.5-2+deb8u7"],"bundled":4},{"source":"osv","ecosystem":"Debian:8","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.6-9+deb8u2"}]}],"versions":["1.5.6-9","1.5.6-9+deb8u1"],"bundled":4},{"source":"osv","ecosystem":"Debian:9","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.26-1+deb9u2"}]}],"versions":["1.7.26-1","1.7.26-1+deb9u1"],"bundled":10},{"source":"osv","ecosystem":"Debian:10","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.17.0-3+deb10u1"}]}],"versions":["9.1.17.0-3"],"bundled":9},{"source":"osv","ecosystem":"Debian:10","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-3+deb10u1"}]}],"versions":["2.5.5-3"],"bundled":4},{"source":"osv","ecosystem":"Debian:9","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-1+deb9u7"}]}],"versions":["2.3.3-1","2.3.3-1+deb9u1","2.3.3-1+deb9u2","2.3.3-1+deb9u3","2.3.3-1+deb9u4","2.3.3-1+deb9u5","2.3.3-1+deb9u6"],"bundled":4},{"source":"osv","ecosystem":"Mageia:7","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7-20.mga7"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:7","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.22-7.2.mga7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygem-did_you_mean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.3-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygem-net-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygem-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.2-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.3-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.1.1-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.7-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygem-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6.3-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby25-rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6.3-9.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.2-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-did_you_mean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.7-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.11.3-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-net-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.3-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.2-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.9-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygem-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3.1-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby26-rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3.1-119.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-4.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-4.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bigdecimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-2.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-2.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-2.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bson-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-2.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-3.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bundler-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-3.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-did_you_mean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-io-console-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.3-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.1-2.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mongo-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.1-2.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-4.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-4.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-4.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-4.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-net-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-2.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-2.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-2.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-2.module+el8.1.0+3656+f80bfa1d"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.2-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-psych-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.2-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.3-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.1.1-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.7-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6.3-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6.3-107.module+el8.4.0+10822+fe4fffb1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-4.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-4.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bigdecimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bson-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.2-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-did_you_mean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.7-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-io-console-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.7-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.11.3-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mongo-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-net-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-psych-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.3-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.2-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.9-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3.1-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3.1-107.module+el8.4.0+10830+bbd85cce"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"ruby-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"ruby-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-4.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-4.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-bigdecimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-bson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-bson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-bson-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.2-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-did_you_mean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.7-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-io-console-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.7-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.11.3-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-mongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-mongo-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-mysql2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-mysql2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-net-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-pg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-pg-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-psych-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.3-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.2.1-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.9-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygem-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3.1-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3.1-107.module+el8.1.0+14088+04cf326e"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"ruby-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"ruby-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-4.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-4.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-bigdecimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-bson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-bson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-bson-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.2-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-did_you_mean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.7-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-io-console-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.7-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.11.3-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-mongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-mongo-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-mysql2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-mysql2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-net-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-pg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-pg-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.1.0+3653+beb38eb0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-psych-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.3-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.2.1-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.9-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygem-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3.1-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3.1-107.module+el8.2.0+14086+86d863af"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.9-107.module+el8.4.0+592+03ff458a"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-4.module+el8.5.0+738+032c9c02"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-4.module+el8.3.0+167+5c390590"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-4.module+el8.4.0+592+03ff458a"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-2.module+el8.4.0+592+03ff458a"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-2.module+el8.3.0+167+5c390590"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-3.module+el8.3.0+167+5c390590"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-3.module+el8.4.0+592+03ff458a"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.1-2.module+el8.4.0+592+03ff458a"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.1-2.module+el8.4.0+349+3470f258"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-4.module+el8.5.0+739+43897a5e"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-4.module+el8.3.0+167+5c390590"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-4.module+el8.4.0+592+03ff458a"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-2.module+el8.4.0+592+03ff458a"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-2.module+el8.3.0+167+5c390590"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-107.module+el8.4.0+593+8d7f9f0c"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-4.module+el8.5.0+738+032c9c02"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-4.module+el8.3.0+167+5c390590"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-4.module+el8.4.0+592+03ff458a"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.4.0+593+8d7f9f0c"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.4.0+446+80b53620"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.4.0+593+8d7f9f0c"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.4.0+446+80b53620"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.5.0+738+032c9c02"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.4.0+446+80b53620"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2-1.module+el8.4.0+593+8d7f9f0c"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.5.0+738+032c9c02"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.4.0+446+80b53620"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-1.module+el8.4.0+593+8d7f9f0c"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7-4.8.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7-4.8.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7-4.8.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7-4.8.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7-4.8.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.6-9+deb8u2build0.14.04.1~esm2"}]}],"versions":["1.5.6-5ubuntu1","1.5.6-6","1.5.6-7"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~ubuntu16.04.14"}]}],"versions":["2.3.0-1","2.3.0-2","2.3.0-4ubuntu2","2.3.0-4ubuntu3","2.3.0-5ubuntu1","2.3.1-2~16.04","2.3.1-2~16.04.2","2.3.1-2~16.04.4","2.3.1-2~16.04.5","2.3.1-2~16.04.6","2.3.1-2~16.04.7","2.3.1-2~16.04.9","2.3.1-2~16.04.10","2.3.1-2~16.04.11","2.3.1-2~16.04.12","2.3.1-2~ubuntu16.04.13"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.21-2ubuntu4","1.7.22-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-1ubuntu1.6"}]}],"versions":["2.5.0~preview1-1ubuntu2","2.5.0-4ubuntu1","2.5.0-4ubuntu4","2.5.0-5ubuntu1","2.5.0-6ubuntu1","2.5.1-1ubuntu1","2.5.1-1ubuntu1.1","2.5.1-1ubuntu1.2","2.5.1-1ubuntu1.4","2.5.1-1ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.1.13.0-1","9.1.17.0-1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.1.17.0-3","9.1.17.0-3build5","9.1.17.0-3build6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.3.9.0+ds-1","9.4.5.0+ds-1","9.4.5.0+ds-1ubuntu1","9.4.6.0+ds-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.8.0+ds-2ubuntu1","9.4.8.0+ds-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.8.0+ds-3ubuntu1","9.4.14.0+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.8.0+ds-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~ubuntu16.04.14"}]}],"versions":["2.3.0-1","2.3.0-2","2.3.0-4ubuntu2","2.3.0-4ubuntu3","2.3.0-5ubuntu1","2.3.1-2~16.04","2.3.1-2~16.04.2","2.3.1-2~16.04.4","2.3.1-2~16.04.5","2.3.1-2~16.04.6","2.3.1-2~16.04.7","2.3.1-2~16.04.9","2.3.1-2~16.04.10","2.3.1-2~16.04.11","2.3.1-2~16.04.12","2.3.1-2~ubuntu16.04.13"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-1ubuntu1.6"}]}],"versions":["2.5.0~preview1-1ubuntu2","2.5.0-4ubuntu1","2.5.0-4ubuntu4","2.5.0-5ubuntu1","2.5.0-6ubuntu1","2.5.1-1ubuntu1","2.5.1-1ubuntu1.1","2.5.1-1ubuntu1.2","2.5.1-1ubuntu1.4","2.5.1-1ubuntu1.5"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7-lp151.4.6.1"}]}],"bundled":7}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"opensuse","product":"leap"},{"vendor":"oracle","product":"graalvm"},{"vendor":"ruby-lang","product":"ruby"}],"references":[{"url":"https://hackerone.com/reports/327512","tags":["x_transferred","Exploit","Patch","Third Party Advisory","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00025.html","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.ruby-lang.org/ja/news/2019/10/01/ruby-2-6-5-released/","tags":["x_transferred","Release Notes","advisory"]},{"url":"https://www.ruby-lang.org/ja/news/2019/10/01/ruby-2-5-7-released/","tags":["x_transferred","Release Notes","advisory"]},{"url":"https://www.ruby-lang.org/ja/news/2019/10/01/ruby-2-4-8-released/","tags":["x_transferred","Release Notes","advisory"]},{"url":"https://www.ruby-lang.org/ja/news/2019/10/01/code-injection-shell-test-cve-2019-16255/","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/12/msg00009.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://seclists.org/bugtraq/2019/Dec/31","tags":["mailing-list","x_transferred","Broken Link","Mailing List","Third Party Advisory","advisory"]},{"url":"https://seclists.org/bugtraq/2019/Dec/32","tags":["mailing-list","x_transferred","Broken Link","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2019/dsa-4587","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/202003-06","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/08/msg00027.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16255","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-ph7w-p94x-9vvw"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-16255","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2587","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/1773728","tags":["report"]},{"url":"https://bugzilla.redhat.com/1789407","tags":["report"]},{"url":"https://bugzilla.redhat.com/1789556","tags":["report"]},{"url":"https://bugzilla.redhat.com/1793683","tags":["report"]},{"url":"https://bugzilla.redhat.com/1827500","tags":["report"]},{"url":"https://bugzilla.redhat.com/1833291","tags":["report"]},{"url":"https://bugzilla.redhat.com/1883623","tags":["report"]},{"url":"https://bugzilla.redhat.com/1947526","tags":["report"]},{"url":"https://bugzilla.redhat.com/1952626","tags":["report"]},{"url":"https://bugzilla.redhat.com/1955010","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-2587.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-15845","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-16201","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-16254","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-16255","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-10663","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-10933","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-25613","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-28965","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2588","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/1651826","tags":["report"]},{"url":"https://bugzilla.redhat.com/1952627","tags":["report"]},{"url":"https://bugzilla.redhat.com/1954968","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-2588.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-3881","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-16255","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-16255","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0408.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25564","tags":["report"]},{"url":"https://www.ruby-lang.org/en/news/2019/10/01/nul-injection-file-fnmatch-cve-2019-15845/","tags":["web","article"]},{"url":"https://www.ruby-lang.org/en/news/2019/10/01/webrick-regexp-digestauth-dos-cve-2019-16201/","tags":["web","article"]},{"url":"https://www.ruby-lang.org/en/news/2019/10/01/http-response-splitting-in-webrick-cve-2019-16254/","tags":["web"]},{"url":"https://www.ruby-lang.org/en/news/2019/10/01/code-injection-shell-test-cve-2019-16255/","tags":["web","report"]},{"url":"https://www.ruby-lang.org/en/news/2019/10/01/ruby-2-5-7-released/","tags":["web"]},{"url":"https://usn.ubuntu.com/4201-1/","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2020-0440.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27402","tags":["report"]},{"url":"https://www.debian.org/lts/security/2020/dla-2330","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2392","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25875","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2104","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1773728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1789407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1789556","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1827500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1833291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952998","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2104.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15845","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15845","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16201","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16201","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16201","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16254","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16255","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16255","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10663","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10663","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10663","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2020/03/19/json-dos-cve-2020-10663","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10933","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10933","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10933","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2020/03/31/heap-exposure-in-socket-cve-2020-10933","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25613","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25613","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25613","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2020/09/29/http-request-smuggling-cve-2020-25613/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28965","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28965","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28965","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2230","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.7_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1950331","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2230.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3881","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3881","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3881","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955010","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2587.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954968","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2588.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0581","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/articles/6206172","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1958999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980128","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026757","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0581.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36327","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36327","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36327","tags":["advisory"]},{"url":"https://www.zofrex.com/blog/2021/04/29/bundler-still-vulnerable-dependency-confusion-cve-2020-36327/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-31799","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-31799","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31799","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2021/05/02/os-command-injection-in-rdoc/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-31810","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-31810","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31810","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2021/07/07/trusting-pasv-responses-in-net-ftp/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-32066","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-32066","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32066","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2021/07/07/starttls-stripping-in-net-imap/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41817","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41817","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41817","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41819","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41819","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41819","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0582","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0582.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:2587","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:2588","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200737-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1140844","tags":["report"]},{"url":"https://bugzilla.suse.com/1152990","tags":["report"]},{"url":"https://bugzilla.suse.com/1152992","tags":["report"]},{"url":"https://bugzilla.suse.com/1152994","tags":["report"]},{"url":"https://bugzilla.suse.com/1152995","tags":["report"]},{"url":"https://bugzilla.suse.com/1162396","tags":["report"]},{"url":"https://bugzilla.suse.com/1164804","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-9251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8130","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201570-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1043983","tags":["report"]},{"url":"https://bugzilla.suse.com/1048072","tags":["report"]},{"url":"https://bugzilla.suse.com/1055265","tags":["report"]},{"url":"https://bugzilla.suse.com/1056286","tags":["report"]},{"url":"https://bugzilla.suse.com/1056782","tags":["report"]},{"url":"https://bugzilla.suse.com/1058754","tags":["report"]},{"url":"https://bugzilla.suse.com/1058755","tags":["report"]},{"url":"https://bugzilla.suse.com/1058757","tags":["report"]},{"url":"https://bugzilla.suse.com/1062452","tags":["report"]},{"url":"https://bugzilla.suse.com/1069607","tags":["report"]},{"url":"https://bugzilla.suse.com/1069632","tags":["report"]},{"url":"https://bugzilla.suse.com/1073002","tags":["report"]},{"url":"https://bugzilla.suse.com/1078782","tags":["report"]},{"url":"https://bugzilla.suse.com/1082007","tags":["report"]},{"url":"https://bugzilla.suse.com/1082008","tags":["report"]},{"url":"https://bugzilla.suse.com/1082009","tags":["report"]},{"url":"https://bugzilla.suse.com/1082010","tags":["report"]},{"url":"https://bugzilla.suse.com/1082011","tags":["report"]},{"url":"https://bugzilla.suse.com/1082014","tags":["report"]},{"url":"https://bugzilla.suse.com/1082058","tags":["report"]},{"url":"https://bugzilla.suse.com/1087433","tags":["report"]},{"url":"https://bugzilla.suse.com/1087434","tags":["report"]},{"url":"https://bugzilla.suse.com/1087436","tags":["report"]},{"url":"https://bugzilla.suse.com/1087437","tags":["report"]},{"url":"https://bugzilla.suse.com/1087440","tags":["report"]},{"url":"https://bugzilla.suse.com/1087441","tags":["report"]},{"url":"https://bugzilla.suse.com/1112530","tags":["report"]},{"url":"https://bugzilla.suse.com/1112532","tags":["report"]},{"url":"https://bugzilla.suse.com/1130611","tags":["report"]},{"url":"https://bugzilla.suse.com/1130617","tags":["report"]},{"url":"https://bugzilla.suse.com/1130620","tags":["report"]},{"url":"https://bugzilla.suse.com/1130622","tags":["report"]},{"url":"https://bugzilla.suse.com/1130623","tags":["report"]},{"url":"https://bugzilla.suse.com/1130627","tags":["report"]},{"url":"https://bugzilla.suse.com/1171517","tags":["report"]},{"url":"https://bugzilla.suse.com/1172275","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-9096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10663","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-16255","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4201-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-15845","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16201","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16254","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZJAMCVFC2KL342QI4W5HGYIZXTNBURQT/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-16255","description":"Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the \"command\" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.","status":"published","published":"2019-11-26T00:00:00Z","modified":"2024-08-05T01:10:41.667Z","updated_at":"2026-11-02T14:32:23.189113Z"}],"euvd":[{"id":"EUVD-2019-7061","description":"Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the \"command\" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.","status":"published","published":"2019-11-26T00:00:00Z","modified":"2024-08-05T01:10:41Z","updated_at":"2026-11-03T02:40:33.71788Z"}],"ghsa":[{"id":"GHSA-ph7w-p94x-9vvw","title":"Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the...","description":"Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the \"command\" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.","status":"published","published":"2022-05-24T17:02:11Z","modified":"2023-05-01T00:30:17Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:54:34.500941Z"}],"nvd":[{"id":"CVE-2019-16255","description":"Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the \"command\" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.","status":"published","published":"2019-11-26T18:15:15.303Z","modified":"2026-06-17T02:22:00.633Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:05:38.993437Z"}],"osv":[{"id":"ALPINE-CVE-2019-16255","description":"Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the \"command\" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.","status":"published","published":"2019-11-26T18:15:15.303Z","modified":"2026-09-21T06:17:52.495517357Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"BELL-CVE-2019-16255","title":"CVE-2019-16255 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:27.25952Z","modified":"2026-01-26T09:49:38.384207Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-16255","description":"Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the \"command\" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.","status":"published","published":"2019-11-26T18:15:15.303Z","modified":"2026-10-24T10:30:24.983796882Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:11.361782Z"},{"id":"DEBIAN-CVE-2019-16255","description":"Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the \"command\" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.","status":"published","published":"2019-11-26T18:15:15.303Z","modified":"2026-09-21T07:01:00.330285874Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"RHSA-2021:2104","title":"Red Hat Security Advisory: rh-ruby25-ruby security, bug fix, and enhancement update","status":"published","published":"2024-09-18T04:28:36Z","modified":"2026-08-09T10:02:38Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:2230","title":"Red Hat Security Advisory: rh-ruby26-ruby security, bug fix, and enhancement update","status":"published","published":"2024-09-18T04:28:52Z","modified":"2026-08-09T10:02:40Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:2587","title":"Red Hat Security Advisory: ruby:2.5 security, bug fix, and enhancement update","status":"published","published":"2024-10-21T23:26:42Z","modified":"2026-08-09T10:02:41Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2588","title":"Red Hat Security Advisory: ruby:2.6 security, bug fix, and enhancement update","status":"published","published":"2024-10-21T23:26:51Z","modified":"2026-08-09T10:02:41Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2022:0581","title":"Red Hat Security Advisory: ruby:2.6 security update","status":"published","published":"2024-10-21T23:27:00Z","modified":"2026-10-09T10:03:18Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0582","title":"Red Hat Security Advisory: ruby:2.6 security update","status":"published","published":"2024-10-21T23:27:11Z","modified":"2026-10-09T10:03:18Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2021:2587","title":"Moderate: ruby:2.5 security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nThe following packages have been upgraded to a later upstream version: ruby (2.5.9). (BZ#1952626)\n\nSecurity Fix(es):\n\n* ruby: NUL injection vulnerability of File.fnmatch and File.fnmatch? (CVE-2019-15845)\n\n* ruby: Regular expression denial of service vulnerability of WEBrick's Digest authentication (CVE-2019-16201)\n\n* ruby: Code injection via command argument of Shell#test / Shell#[] (CVE-2019-16255)\n\n* rubygem-json: Unsafe object creation vulnerability in JSON (CVE-2020-10663)\n\n* ruby: BasicSocket#read_nonblock method leads to information disclosure (CVE-2020-10933)\n\n* ruby: Potential HTTP request smuggling in WEBrick (CVE-2020-25613)\n\n* ruby: XML round-trip vulnerability in REXML (CVE-2021-28965)\n\n* ruby: HTTP response splitting in WEBrick (CVE-2019-16254)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-06-29T13:58:20Z","modified":"2026-02-04T23:30:03.821299Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RLSA-2021:2588","title":"Moderate: ruby:2.6 security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nThe following packages have been upgraded to a later upstream version: ruby (2.6.7). (BZ#1952627)\n\nSecurity Fix(es):\n\n* rubygem-bundler: Insecure permissions on directory in /tmp/ allows for execution of malicious code (CVE-2019-3881)\n\n* ruby: NUL injection vulnerability of File.fnmatch and File.fnmatch? (CVE-2019-15845)\n\n* ruby: Regular expression denial of service vulnerability of WEBrick's Digest authentication (CVE-2019-16201)\n\n* ruby: Code injection via command argument of Shell#test / Shell#[] (CVE-2019-16255)\n\n* rubygem-json: Unsafe object creation vulnerability in JSON (CVE-2020-10663)\n\n* ruby: BasicSocket#read_nonblock method leads to information disclosure (CVE-2020-10933)\n\n* ruby: Potential HTTP request smuggling in WEBrick (CVE-2020-25613)\n\n* ruby: XML round-trip vulnerability in REXML (CVE-2021-28965)\n\n* ruby: HTTP response splitting in WEBrick (CVE-2019-16254)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Resolv::DNS: ruby:2.6/ruby: timeouts if multiple IPv6 name servers are given and address contains leading zero [Rocky Linux-8] (BZ#1954968)","status":"published","published":"2021-06-29T13:58:40Z","modified":"2026-02-05T05:30:10.956147Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-16255","description":"Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the \"command\" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.","status":"published","published":"2019-11-20T00:00:00Z","modified":"2026-10-17T12:55:25.08723388Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"ALSA-2021:2587","title":"Moderate: ruby:2.5 security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nThe following packages have been upgraded to a later upstream version: ruby (2.5.9). (BZ#1952626)\n\nSecurity Fix(es):\n\n* ruby: NUL injection vulnerability of File.fnmatch and File.fnmatch? (CVE-2019-15845)\n\n* ruby: Regular expression denial of service vulnerability of WEBrick's Digest authentication (CVE-2019-16201)\n\n* ruby: Code injection via command argument of Shell#test / Shell#[] (CVE-2019-16255)\n\n* rubygem-json: Unsafe object creation vulnerability in JSON (CVE-2020-10663)\n\n* ruby: BasicSocket#read_nonblock method leads to information disclosure (CVE-2020-10933)\n\n* ruby: Potential HTTP request smuggling in WEBrick (CVE-2020-25613)\n\n* ruby: XML round-trip vulnerability in REXML (CVE-2021-28965)\n\n* ruby: HTTP response splitting in WEBrick (CVE-2019-16254)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-06-29T13:58:20Z","modified":"2026-11-02T09:30:05.099961079Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2021:2588","title":"Moderate: ruby:2.6 security, bug fix, and enhancement update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nThe following packages have been upgraded to a later upstream version: ruby (2.6.7). (BZ#1952627)\n\nSecurity Fix(es):\n\n* rubygem-bundler: Insecure permissions on directory in /tmp/ allows for execution of malicious code (CVE-2019-3881)\n\n* ruby: NUL injection vulnerability of File.fnmatch and File.fnmatch? (CVE-2019-15845)\n\n* ruby: Regular expression denial of service vulnerability of WEBrick's Digest authentication (CVE-2019-16201)\n\n* ruby: Code injection via command argument of Shell#test / Shell#[] (CVE-2019-16255)\n\n* rubygem-json: Unsafe object creation vulnerability in JSON (CVE-2020-10663)\n\n* ruby: BasicSocket#read_nonblock method leads to information disclosure (CVE-2020-10933)\n\n* ruby: Potential HTTP request smuggling in WEBrick (CVE-2020-25613)\n\n* ruby: XML round-trip vulnerability in REXML (CVE-2021-28965)\n\n* ruby: HTTP response splitting in WEBrick (CVE-2019-16254)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Resolv::DNS: ruby:2.6/ruby: timeouts if multiple IPv6 name servers are given and address contains leading zero [almalinux-8] (BZ#1954968)","status":"published","published":"2021-06-29T13:58:40Z","modified":"2026-11-02T09:30:02.557425394Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-2007-1","title":"ruby2.1 - security update","status":"published","published":"2019-11-25T00:00:00Z","modified":"2026-03-09T01:21:49.35077Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2027-1","title":"jruby - security update","status":"published","published":"2019-12-10T00:00:00Z","modified":"2026-03-09T01:17:45.903042Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2330-1","title":"jruby - security update","status":"published","published":"2020-08-16T00:00:00Z","modified":"2026-03-09T01:20:12.541901Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DLA-3408-1","title":"jruby - security update","status":"published","published":"2023-04-30T00:00:00Z","modified":"2026-03-09T01:21:55.556441Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-4586-1","title":"ruby2.5 - security update","status":"published","published":"2019-12-17T00:00:00Z","modified":"2026-03-09T02:10:55.760403Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"DSA-4587-1","title":"ruby2.3 - security update","status":"published","published":"2019-12-17T00:00:00Z","modified":"2026-03-09T02:09:39.283867Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2019-0408","title":"Updated ruby packages fix security vulnerabilities","description":"Updated ruby packages fix security vulnerabilities:\n\nIt was discovered that Ruby incorrectly handled certain files. An attacker\ncould possibly use this issue to pass path matching what can lead to an\nunauthorized access (CVE-2019-15845).\n\nIt was discovered that Ruby incorrectly handled certain regular expressions.\nAn attacker could use this issue to cause a denial of service\n(CVE-2019-16201).\n\nIt was discovered that Ruby incorrectly handled certain HTTP headers. An\nattacker could possibly use this issue to execute arbitrary code\n(CVE-2019-16254).\n\nIt was discovered that Ruby incorrectly handled certain inputs. An attacker\ncould possibly use this issue to execute arbitrary code (CVE-2019-16255).\n","status":"published","published":"2019-12-25T19:08:41Z","modified":"2026-04-16T04:42:59.539944914Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"MGASA-2020-0440","title":"Updated jruby packages fix security vulnerabilities","description":"Response Splitting attack in the HTTP server of WEBrick (CVE-2017-17742).\n\nDelete directory using symlink when decompressing tar (CVE-2019-8320).\n\nEscape sequence injection vulnerability in verbose (CVE-2019-8321).\n\nEscape sequence injection vulnerability in gem owner (CVE-2019-8322).\n\nEscape sequence injection vulnerability in API response handling (CVE-2019-8323).\n\nInstalling a malicious gem may lead to arbitrary code execution\n(CVE-2019-8324).\n\nEscape sequence injection vulnerability in errors (CVE-2019-8325).\n\nRegular Expression Denial of Service vulnerability of WEBrick's Digest access\nauthentication (CVE-2019-16201).\n\nHTTP Response Splitting attack in the HTTP server of WEBrick (CVE-2019-16254).\n\nCode injection vulnerability (CVE-2019-16255).\n\nA potential HTTP request smuggling vulnerability in WEBrick was reported.\nWEBrick (bundled along with jruby) was too tolerant against an invalid\nTransfer-Encoding header. This may lead to inconsistent interpretation between\nWEBrick and some HTTP proxy servers, which may allow the attacker to \"smuggle\"\na request (CVE-2020-25613).\n","status":"published","published":"2020-11-27T20:14:57Z","modified":"2026-04-16T04:43:26.64405821Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2020:0395-1","title":"Recommended update for ruby2.5","description":"This update for ruby2.5 toversion 2.5.7  fixes the following issues:\n\t  \nruby 2.5 was updated to version 2.5.7 \n\n- CVE-2020-8130: Fixed a command injection in intree copy of rake (bsc#1164804).\n- CVE-2019-16255: Fixed a code injection vulnerability of Shell#[] and \n  Shell#test (bsc#1152990).\n- CVE-2019-16254: Fixed am HTTP response splitting in WEBrick (bsc#1152992).\n- CVE-2019-15845: Fixed a null injection vulnerability of File.fnmatch and \n  File.fnmatch? (bsc#1152994).\n- CVE-2019-16201: Fixed a regular expression denial of service of WEBrick \n  Digest access authentication (bsc#1152995).\n- CVE-2012-6708: Fixed an XSS in JQuery\n- CVE-2015-9251: Fixed an XSS in JQuery\n- Fixed unit tests (bsc#1140844)\n- Removed some unneeded test files (bsc#1162396).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-03-28T17:16:57Z","modified":"2026-02-04T02:31:59.189868Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"SUSE-SU-2020:0737-1","title":"Recommended update for ruby2.5","description":"This update for ruby2.5 toversion 2.5.7  fixes the following issues:\n\t  \nruby 2.5 was updated to version 2.5.7 \n\n- CVE-2020-8130: Fixed a command injection in intree copy of rake (bsc#1164804).\n- CVE-2019-16255: Fixed a code injection vulnerability of Shell#[] and \n  Shell#test (bsc#1152990).\n- CVE-2019-16254: Fixed am HTTP response splitting in WEBrick (bsc#1152992).\n- CVE-2019-15845: Fixed a null injection vulnerability of File.fnmatch and \n  File.fnmatch? (bsc#1152994).\n- CVE-2019-16201: Fixed a regular expression denial of service of WEBrick \n  Digest access authentication (bsc#1152995).\n- CVE-2012-6708: Fixed an XSS in JQuery\n- CVE-2015-9251: Fixed an XSS in JQuery\n- Fixed unit tests (bsc#1140844)\n- Removed some unneeded test files (bsc#1162396).\n","status":"published","published":"2020-03-20T12:47:31Z","modified":"2025-05-02T04:03:54.783923Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:1570-1","title":"Security update for ruby2.1","description":"This update for ruby2.1 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2015-9096: Fixed an SMTP command injection via CRLFsequences in a RCPT TO or MAIL FROM command (bsc#1043983).\n- CVE-2016-7798: Fixed an IV Reuse in GCM Mode (bsc#1055265).\n- CVE-2017-0898: Fixed a buffer underrun vulnerability in Kernel.sprintf (bsc#1058755).\n- CVE-2017-0899: Fixed an issue with malicious gem specifications, insufficient sanitation when printing gem specifications could have included terminal characters (bsc#1056286).\n- CVE-2017-0900: Fixed an issue with malicious gem specifications, the query command could have led to a denial of service attack against clients (bsc#1056286).\n- CVE-2017-0901: Fixed an issue with malicious gem specifications, potentially overwriting arbitrary files on the client system (bsc#1056286).\n- CVE-2017-0902: Fixed an issue with malicious gem specifications, that could have enabled MITM attacks against clients (bsc#1056286).\n- CVE-2017-0903: Fixed an unsafe object deserialization vulnerability (bsc#1062452).\n- CVE-2017-9228: Fixed a heap out-of-bounds write in bitset_set_range() during regex compilation (bsc#1069607).\n- CVE-2017-9229: Fixed an invalid pointer dereference in left_adjust_char_head() in oniguruma (bsc#1069632).\n- CVE-2017-10784: Fixed an escape sequence injection vulnerability in the Basic authentication of WEBrick (bsc#1058754).\n- CVE-2017-14033: Fixed a buffer underrun vulnerability in OpenSSL ASN1 decode (bsc#1058757).\n- CVE-2017-14064: Fixed an arbitrary memory exposure during a JSON.generate call (bsc#1056782).\n- CVE-2017-17405: Fixed a command injection vulnerability in Net::FTP (bsc#1073002).\n- CVE-2017-17742: Fixed an HTTP response splitting issue in WEBrick (bsc#1087434).\n- CVE-2017-17790: Fixed a command injection in lib/resolv.rb:lazy_initialize() (bsc#1078782).\n- CVE-2018-6914: Fixed an unintentional file and directory creation with directory traversal in tempfile and tmpdir (bsc#1087441).\n- CVE-2018-8777: Fixed a potential DoS caused by large requests in WEBrick (bsc#1087436).\n- CVE-2018-8778: Fixed a buffer under-read in String#unpack (bsc#1087433).\n- CVE-2018-8779: Fixed an unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket (bsc#1087440).\n- CVE-2018-8780: Fixed an unintentional directory traversal by poisoned NUL byte in Dir (bsc#1087437).\n- CVE-2018-16395: Fixed an issue with OpenSSL::X509::Name equality checking (bsc#1112530).\n- CVE-2018-16396: Fixed an issue with tainted string handling, where the flag was not propagated in Array#pack and String#unpack with some directives (bsc#1112532).\n- CVE-2018-1000073: Fixed a path traversal issue (bsc#1082007).\n- CVE-2018-1000074: Fixed an unsafe object deserialization vulnerability in gem owner, allowing arbitrary code execution with specially crafted YAML (bsc#1082008).\n- CVE-2018-1000075: Fixed an infinite loop vulnerability due to negative size in tar header causes Denial of Service (bsc#1082014).\n- CVE-2018-1000076: Fixed an improper verification of signatures in tarballs (bsc#1082009).\n- CVE-2018-1000077: Fixed an improper URL validation in the homepage attribute of ruby gems (bsc#1082010).\n- CVE-2018-1000078: Fixed a XSS vulnerability in the homepage attribute when displayed via gem server (bsc#1082011).\n- CVE-2018-1000079: Fixed a path traversal issue during gem installation allows to write to arbitrary filesystem locations (bsc#1082058).\n- CVE-2019-8320: Fixed a directory traversal issue when decompressing tar files (bsc#1130627).\n- CVE-2019-8321: Fixed an escape sequence injection vulnerability in verbose (bsc#1130623).\n- CVE-2019-8322: Fixed an escape sequence injection vulnerability in gem owner (bsc#1130622).\n- CVE-2019-8323: Fixed an escape sequence injection vulnerability in API response handling (bsc#1130620).\n- CVE-2019-8324: Fixed an issue with malicious gems that may have led to arbitrary code execution (bsc#1130617).\n- CVE-2019-8325: Fixed an escape sequence injection vulnerability in errors (bsc#1130611).\n- CVE-2019-15845: Fixed a NUL injection vulnerability in File.fnmatch and File.fnmatch? (bsc#1152994).\n- CVE-2019-16201: Fixed a regular expression denial of service vulnerability in WEBrick's digest access authentication (bsc#1152995).\n- CVE-2019-16254: Fixed an HTTP response splitting vulnerability in WEBrick (bsc#1152992).\n- CVE-2019-16255: Fixed a code injection vulnerability in Shell#[] and Shell#test (bsc#1152990).\n- CVE-2020-10663: Fixed an unsafe object creation vulnerability in JSON (bsc#1171517).\n\nNon-security issue fixed:\n\n- Add conflicts to libruby to make sure ruby and ruby-stdlib are also updated when libruby is updated (bsc#1048072).\n\nAlso yast2-ruby-bindings on SLES 12 SP2 LTSS was updated to handle the updated ruby interpreter. (bsc#1172275)\n","status":"published","published":"2020-06-09T09:16:12Z","modified":"2026-02-04T03:07:34.074987Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4201-1","title":"ruby2.3, ruby2.5 vulnerabilities","description":"It was discovered that Ruby incorrectly handled certain files.\nAn attacker could possibly use this issue to pass path matching\nwhat can lead to an unauthorized access. (CVE-2019-15845)\n\nIt was discovered that Ruby incorrectly handled certain regular expressions.\nAn attacker could use this issue to cause a denial of service.\n(CVE-2019-16201)\n\nIt was discovered that Ruby incorrectly handled certain HTTP headers.\nAn attacker could possibly use this issue to execute arbitrary code.\n(CVE-2019-16254)\n\nIt was discovered that Ruby incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code.\n(CVE-2019-16255)\n","status":"published","published":"2019-11-26T14:48:39Z","modified":"2026-04-27T15:48:42.576736156Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}
