rubygems vulnerabilities (Debian)
28 vulnerabilities.
-
rubygemsDebian RubyGems fails to re-validate path containment after filesystem symlink resolution during gem... 6.9 Medium -
rubygemsDebian URI Credential Leakage Bypass over CVE-2025-27221 2.1 Low -
rubygemsDebian URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+ 3.2 Low -
rubygemsDebian Ruby URI component ReDoS issue 5.3 Medium -
rubygemsDebian Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile 6.7 Medium -
rubygemsDebian Dependency Confusion in Bundler 8.8 High -
rubygemsDebian RubyGems Escape sequence injection in errors 7.5 High -
rubygemsDebian Code injection in RubyGems 8.8 High -
rubygemsDebian RubyGems Escape sequence injection vulnerability in api response handling 7.5 High -
rubygemsDebian RubyGems Escape sequence injection vulnerability in gem owner 7.5 High -
rubygemsDebian RubyGems Escape sequence injection vulnerability in verbose 7.5 High -
rubygemsDebian RubyGems Delete directory using symlink when decompressing tar 7.4 High -
rubygemsDebian RubyGems Path Traversal vulnerability 5.5 Medium -
rubygemsDebian RubyGems Cross-site Scripting vulnerability 6.1 Medium -
rubygemsDebian RubyGems Improper Input Validation vulnerability 5.3 Medium -
rubygemsDebian RubyGems Improper Verification of Cryptographic Signature vulnerability 9.8 Critical -
rubygemsDebian RubyGems Infinite Loop vulnerability 7.5 High -
rubygemsDebian RubyGems Deserialization of Untrusted Data vulnerability 7.8 High -
rubygemsDebian RubyGems Link Following vulnerability 7.5 High -
rubygemsDebian RubyGems vulnerable to Deserialization of Untrusted Data 9.8 Critical -
rubygemsDebian RubyGems has Origin Validation Error vulnerability 8.1 High -
rubygemsDebian RubyGems may allow a maliciously crafted gem to overwrite files 7.5 High -
rubygemsDebian RubyGems Improper Input Validation vulnerability 7.5 High -
rubygemsDebian RubyGems Code Injection vulnerability 9.8 Critical -
rubygemsDebian RubyGems Regular Expression Denial of Service 4.3 Medium -
rubygemsDebian RubyGems Regular Expression Denial of Service vulnerability 4.3 Medium -
rubygemsDebian RubyGems does not verify SSL certificate 4.3 Medium -
rubygemsDebian RubyGems HTTPS to HTTP redirect 5.8 Medium