rubygem-bigdecimal vulnerabilities (AlmaLinux)
44 vulnerabilities.
-
rubygem-bigdecimalAlmaLinux GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver 6.1 Medium -
rubygem-bigdecimalAlmaLinux An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,... 7.5 High -
rubygem-bigdecimalAlmaLinux Net::IMAP: Command Injection via ID command argument 5.8 Medium -
rubygem-bigdecimalAlmaLinux Net::IMAP: Denial of Service via incomplete raw argument validation 2.1 Low -
rubygem-bigdecimalAlmaLinux Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument 5.8 Medium -
rubygem-bigdecimalAlmaLinux net-imap: Command Injection via "raw" arguments to multiple commands 5.8 Medium -
rubygem-bigdecimalAlmaLinux net-imap: Command Injection via unvalidated Symbol inputs 5.8 Medium -
rubygem-bigdecimalAlmaLinux net-imap: Denial of service via high iteration count for `SCRAM-*` authentication 6.0 Medium -
rubygem-bigdecimalAlmaLinux net-imap: Quadratic complexity when reading response literals 2.3 Low -
rubygem-bigdecimalAlmaLinux ERB has an @_init deserialization guard bypass via def_module / def_method / def_class 8.1 High -
rubygem-bigdecimalAlmaLinux zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption 1.7 Low -
rubygem-bigdecimalAlmaLinux Ruby JSON has a format string injection vulnerability 8.3 High -
rubygem-bigdecimalAlmaLinux URI Credential Leakage Bypass over CVE-2025-27221 2.1 Low -
rubygem-bigdecimalAlmaLinux REXML has a DoS condition when parsing malformed XML file 1.2 Low -
rubygem-bigdecimalAlmaLinux resolv vulnerable to DoS via insufficient DNS domain name length validation 7.5 High -
rubygem-bigdecimalAlmaLinux net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High -
rubygem-bigdecimalAlmaLinux URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+ 3.2 Low -
rubygem-bigdecimalAlmaLinux CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement 4.0 Medium -
rubygem-bigdecimalAlmaLinux CGI has Denial of Service (DoS) potential in Cookie.parse 5.8 Medium -
rubygem-bigdecimalAlmaLinux Net::IMAP vulnerable to possible DoS by memory exhaustion 6.5 Medium -
rubygem-bigdecimalAlmaLinux REXML ReDoS vulnerability 6.6 Medium -
rubygem-bigdecimalAlmaLinux REXML denial of service vulnerability 5.9 Medium -
rubygem-bigdecimalAlmaLinux REXML DoS vulnerability 5.3 Medium -
rubygem-bigdecimalAlmaLinux REXML DoS vulnerability 5.3 Medium -
rubygem-bigdecimalAlmaLinux Denial of service in REXML 4.3 Medium -
rubygem-bigdecimalAlmaLinux REXML contains a denial of service vulnerability 5.3 Medium -
rubygem-bigdecimalAlmaLinux An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the... 6.6 Medium -
rubygem-bigdecimalAlmaLinux RDoc RCE vulnerability with .rdoc_options 4.5 Medium -
rubygem-bigdecimalAlmaLinux StringIO buffer overread vulnerability 9.8 Critical -
rubygem-bigdecimalAlmaLinux URI gem has ReDoS vulnerability 5.3 Medium -
rubygem-bigdecimalAlmaLinux Ruby Time component ReDoS issue 5.3 Medium -
rubygem-bigdecimalAlmaLinux Ruby URI component ReDoS issue 5.3 Medium -
rubygem-bigdecimalAlmaLinux HTTP response splitting in CGI 8.8 High -
rubygem-bigdecimalAlmaLinux There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1... 7.5 High -
rubygem-bigdecimalAlmaLinux A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2.... 9.8 Critical -
rubygem-bigdecimalAlmaLinux Cookie Prefix Spoofing in CGI::Cookie.parse 7.5 High -
rubygem-bigdecimalAlmaLinux Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile 6.7 Medium -
rubygem-bigdecimalAlmaLinux Regular expression denial of service vulnerability (ReDoS) in date 7.5 High -
rubygem-bigdecimalAlmaLinux new module: ruby:3.0 No score -
rubygem-bigdecimalAlmaLinux An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net:... 7.4 High -
rubygem-bigdecimalAlmaLinux Arbitrary Code Execution in Rdoc 7.0 High -
rubygem-bigdecimalAlmaLinux An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A... 5.8 Medium -
rubygem-bigdecimalAlmaLinux Dependency Confusion in Bundler 8.8 High -
rubygem-bigdecimalAlmaLinux An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9... 9.8 Critical