ruby vulnerabilities (Red Hat)
137 vulnerabilities.
rubyRed HatWEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4...7.5 HighrubyRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within...6.5 MediumrubyRed HatAn integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9...9.8 CriticalrubyRed HatRubyzip denial of service5.5 MediumrubyRed HatRubyGems Escape sequence injection in errors7.5 HighrubyRed HatCode injection in RubyGems8.8 HighrubyRed HatRubyGems Escape sequence injection vulnerability in api response handling7.5 HighrubyRed HatRubyGems Escape sequence injection vulnerability in gem owner7.5 HighrubyRed HatRubyGems Escape sequence injection vulnerability in verbose7.5 HighrubyRed HatRubyGems Delete directory using symlink when decompressing tar7.4 HighrubyRed HatAn issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x...8.1 HighrubyRed HatRuby Openssl Allows Incorrect Value Comparison9.8 CriticalrubyRed HatSinatra Cross-site Scripting vulnerability6.1 MediumrubyRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...9.1 CriticalrubyRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 HighrubyRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 HighrubyRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 HighrubyRed HatDirectory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before...7.5 HighrubyRed HatRuby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...5.3 MediumrubyRed Hatrails-html-sanitizer Cross-site Scripting vulnerability6.1 MediumrubyRed HatCross-site Scripting in loofah6.1 MediumrubyRed HatRubyGems Path Traversal vulnerability5.5 MediumrubyRed HatRubyGems Cross-site Scripting vulnerability6.1 MediumrubyRed HatRubyGems Improper Input Validation vulnerability5.3 MediumrubyRed HatRubyGems Improper Verification of Cryptographic Signature vulnerability9.8 CriticalrubyRed HatRubyGems Infinite Loop vulnerability7.5 HighrubyRed HatRubyGems Deserialization of Untrusted Data vulnerability7.8 HighrubyRed HatRubyGems Link Following vulnerability7.5 HighrubyRed HatThe lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might...9.8 CriticalrubyRed HatRuby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,...8.8 HighrubyRed HatRubyGems vulnerable to Deserialization of Untrusted Data9.8 CriticalrubyRed HatRuby OpenSSL DoS Vulnerability7.5 HighrubyRed HatWEBrick RCE Vulnerability8.8 HighrubyRed HatRuby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a...9.1 CriticalrubyRed HatRuby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory...9.8 CriticalrubyRed HatRubyGems has Origin Validation Error vulnerability8.1 HighrubyRed HatRubyGems may allow a maliciously crafted gem to overwrite files7.5 HighrubyRed HatRubyGems Improper Input Validation vulnerability7.5 HighrubyRed HatRubyGems Code Injection vulnerability9.8 CriticalrubyRed HatNokogiri is vulnerable to XML External Entity (XXE) attack7.5 HighrubyRed HatThe REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598,...5.0 MediumrubyRed HatThe REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4...5.0 MediumrubyRed HatOff-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1...5.0 MediumrubyRed HatHeap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before...6.8 MediumrubyRed HatThe OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1...6.8 MediumrubyRed HatThe safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the...4.3 MediumrubyRed HatRuby vulnerable to denial of service5.0 MediumrubyRed HatThe rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0...5.0 MediumrubyRed HatRuby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to...7.8 HighrubyRed HatRuby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for...5.0 Medium- Show moreLoading…