rubygem-git vulnerabilities (Red Hat)
86 vulnerabilities.
rubygem-gitRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumrubygem-gitRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highrubygem-gitRed HatUncontrolled Recursion in Loofah7.5 Highrubygem-gitRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumrubygem-gitRed HatInefficient Regular Expression Complexity in Loofah7.5 Highrubygem-gitRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 Mediumrubygem-gitRed HatRemote Code Execution (RCE)8.1 Highrubygem-gitRed HatRemote Code execution in SnakeYAML8.3 Highrubygem-gitRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumrubygem-gitRed HatPlaintext storage of tokens in pulp_ansible5.5 Mediumrubygem-gitRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalrubygem-gitRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highrubygem-gitRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highrubygem-gitRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highrubygem-gitRed HatDoS in SnakeYAML6.5 Mediumrubygem-gitRed HatDoS in SnakeYAML6.5 Mediumrubygem-gitRed HatDoS in SnakeYAML6.5 Mediumrubygem-gitRed HatDoS in SnakeYAML6.5 Mediumrubygem-gitRed HatDenial of Service (DoS)7.5 Highrubygem-gitRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highrubygem-gitRed HatActive Record RCE bug with Serialized Columns9.8 Criticalrubygem-gitRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalrubygem-gitRed HatDjango `Trunc()` and `Extract()` database functions vulnerable to SQL Injection9.8 Criticalrubygem-gitRed HatRails::Html::Sanitizer vulnerable to Cross-site Scripting6.1 Mediumrubygem-gitRed HatThe c_rehash script allows command injection7.3 Highrubygem-gitRed HatImproper Handling of Unexpected Data Type in Nokogiri8.2 Highrubygem-gitRed HatThe c_rehash script allows command injection7.3 Highrubygem-gitRed Hatsinatra does not validate expanded path matches7.5 Highrubygem-gitRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumrubygem-gitRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumrubygem-gitRed HatCommand Injection8.1 Highrubygem-gitRed HatInefficient Regular Expression Complexity in Nokogiri7.5 Highrubygem-gitRed HatImproper Certificate Validation in kubeclient8.1 Highrubygem-gitRed HatCross-site Scripting in Django6.1 Mediumrubygem-gitRed HatSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Highrubygem-gitRed HatBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 High