rubygem-io-console vulnerabilities (AlmaLinux)

44 vulnerabilities.

• rubygem-io-console AlmaLinux GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver CVE-2026-88030 Fix available 6.1 MediumSeptember 10, 2026
• rubygem-io-console AlmaLinux An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,... CVE-2026-80212 Fix available 7.5 HighAugust 21, 2026
• rubygem-io-console AlmaLinux Net::IMAP: Command Injection via ID command argument CVE-2026-47242 Fix available 5.8 MediumJune 9, 2026
• rubygem-io-console AlmaLinux Net::IMAP: Denial of Service via incomplete raw argument validation CVE-2026-47241 Fix available 2.1 LowJune 9, 2026
• rubygem-io-console AlmaLinux Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument CVE-2026-47240 Fix available 5.8 MediumJune 9, 2026
• rubygem-io-console AlmaLinux net-imap: Command Injection via "raw" arguments to multiple commands CVE-2026-42257 Fix available 5.8 MediumMay 4, 2026
• rubygem-io-console AlmaLinux net-imap: Command Injection via unvalidated Symbol inputs CVE-2026-42258 Fix available 5.8 MediumMay 4, 2026
• rubygem-io-console AlmaLinux net-imap: Denial of service via high iteration count for `SCRAM-*` authentication CVE-2026-42256 Fix available 6.0 MediumMay 4, 2026
• rubygem-io-console AlmaLinux net-imap: Quadratic complexity when reading response literals CVE-2026-42245 Fix available 2.3 LowMay 4, 2026
• rubygem-io-console AlmaLinux ERB has an @_init deserialization guard bypass via def_module / def_method / def_class CVE-2026-41316 Fix available 8.1 HighApril 23, 2026
• rubygem-io-console AlmaLinux zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption CVE-2026-27820 Fix available 1.7 LowMarch 20, 2026
• rubygem-io-console AlmaLinux Ruby JSON has a format string injection vulnerability CVE-2026-33210 Fix available 8.3 HighMarch 19, 2026
• rubygem-io-console AlmaLinux URI Credential Leakage Bypass over CVE-2025-27221 CVE-2025-61594 Fix available 2.1 LowOctober 8, 2025
• rubygem-io-console AlmaLinux REXML has a DoS condition when parsing malformed XML file CVE-2025-58767 Fix available 1.2 LowSeptember 17, 2025
• rubygem-io-console AlmaLinux resolv vulnerable to DoS via insufficient DNS domain name length validation CVE-2025-24294 Fix available 7.5 HighJuly 12, 2025
• rubygem-io-console AlmaLinux net-imap vulnerable to STARTTLS stripping via invalid response timing CVE-2026-42246 Fix available 7.6 HighJune 29, 2025
• rubygem-io-console AlmaLinux URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+ CVE-2025-27221 Fix available 3.2 LowMarch 3, 2025
• rubygem-io-console AlmaLinux CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement CVE-2025-27220 Fix available 4.0 MediumMarch 3, 2025
• rubygem-io-console AlmaLinux CGI has Denial of Service (DoS) potential in Cookie.parse CVE-2025-27219 Fix available 5.8 MediumMarch 3, 2025
• rubygem-io-console AlmaLinux Net::IMAP vulnerable to possible DoS by memory exhaustion CVE-2025-25186 Fix available 6.5 MediumFebruary 10, 2025
• rubygem-io-console AlmaLinux REXML ReDoS vulnerability CVE-2024-49761 Fix available 6.6 MediumOctober 28, 2024
• rubygem-io-console AlmaLinux REXML denial of service vulnerability CVE-2024-43398 Fix available 5.9 MediumAugust 22, 2024
• rubygem-io-console AlmaLinux REXML DoS vulnerability CVE-2024-41946 Fix available 5.3 MediumAugust 1, 2024
• rubygem-io-console AlmaLinux REXML DoS vulnerability CVE-2024-41123 Fix available 5.3 MediumAugust 1, 2024
• rubygem-io-console AlmaLinux Denial of service in REXML CVE-2024-39908 Public exploitFix available 4.3 MediumJuly 16, 2024
• rubygem-io-console AlmaLinux REXML contains a denial of service vulnerability CVE-2024-35176 Public exploitFix available 5.3 MediumMay 16, 2024
• rubygem-io-console AlmaLinux An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the... CVE-2024-27282 Fix available 6.6 MediumApril 27, 2024
• rubygem-io-console AlmaLinux RDoc RCE vulnerability with .rdoc_options CVE-2024-27281 Fix available 4.5 MediumMarch 25, 2024
• rubygem-io-console AlmaLinux StringIO buffer overread vulnerability CVE-2024-27280 Fix available 9.8 CriticalMarch 25, 2024
• rubygem-io-console AlmaLinux URI gem has ReDoS vulnerability CVE-2023-36617 Fix available 5.3 MediumJune 29, 2023
• rubygem-io-console AlmaLinux Ruby Time component ReDoS issue CVE-2023-28756 Fix available 5.3 MediumMarch 31, 2023
• rubygem-io-console AlmaLinux Ruby URI component ReDoS issue CVE-2023-28755 Fix available 5.3 MediumMarch 31, 2023
• rubygem-io-console AlmaLinux HTTP response splitting in CGI CVE-2021-33621 Fix available 8.8 HighNovember 18, 2022
• rubygem-io-console AlmaLinux There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1... CVE-2022-28739 Fix available 7.5 HighApril 15, 2022
• rubygem-io-console AlmaLinux A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2.... CVE-2022-28738 Fix available 9.8 CriticalApril 15, 2022
• rubygem-io-console AlmaLinux Cookie Prefix Spoofing in CGI::Cookie.parse CVE-2021-41819 Fix available 7.5 HighDecember 23, 2021
• rubygem-io-console AlmaLinux Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile CVE-2021-43809 Fix available 6.7 MediumDecember 8, 2021
• rubygem-io-console AlmaLinux Regular expression denial of service vulnerability (ReDoS) in date CVE-2021-41817 Fix available 7.5 HighNovember 16, 2021
• rubygem-io-console AlmaLinux new module: ruby:3.0 ALEA-2021:4282 Fix available No scoreNovember 9, 2021
• rubygem-io-console AlmaLinux An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net:... CVE-2021-32066 Fix available 7.4 HighJuly 15, 2021
• rubygem-io-console AlmaLinux Arbitrary Code Execution in Rdoc CVE-2021-31799 Fix available 7.0 HighJuly 15, 2021
• rubygem-io-console AlmaLinux An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A... CVE-2021-31810 Fix available 5.8 MediumJuly 13, 2021
• rubygem-io-console AlmaLinux Dependency Confusion in Bundler CVE-2020-36327 Fix available 8.8 HighApril 29, 2021
• rubygem-io-console AlmaLinux An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9... CVE-2019-19012 Public exploitFix available EPSS 10.6% 9.8 CriticalNovember 16, 2019