rubygem-pg vulnerabilities (Red Hat)
104 vulnerabilities.
-
rubygem-pgRed Hat GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver 6.1 Medium -
rubygem-pgRed Hat An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,... 7.5 High -
rubygem-pgRed Hat Net::IMAP: Command Injection via ID command argument 5.8 Medium -
rubygem-pgRed Hat Net::IMAP: Denial of Service via incomplete raw argument validation 2.1 Low -
rubygem-pgRed Hat Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument 5.8 Medium -
rubygem-pgRed Hat net-imap: Command Injection via "raw" arguments to multiple commands 5.8 Medium -
rubygem-pgRed Hat net-imap: Command Injection via unvalidated Symbol inputs 5.8 Medium -
rubygem-pgRed Hat net-imap: Denial of service via high iteration count for `SCRAM-*` authentication 6.0 Medium -
rubygem-pgRed Hat net-imap: Quadratic complexity when reading response literals 2.3 Low -
rubygem-pgRed Hat ERB has an @_init deserialization guard bypass via def_module / def_method / def_class 8.1 High -
rubygem-pgRed Hat zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption 1.7 Low -
rubygem-pgRed Hat Ruby JSON has a format string injection vulnerability 8.3 High -
rubygem-pgRed Hat Git LFS may write to arbitrary files via crafted symlinks 8.6 High -
rubygem-pgRed Hat URI Credential Leakage Bypass over CVE-2025-27221 2.1 Low -
rubygem-pgRed Hat Out-of-bounds read & write in RFC 3211 KEK Unwrap 7.5 High -
rubygem-pgRed Hat REXML has a DoS condition when parsing malformed XML file 1.2 Low -
rubygem-pgRed Hat resolv vulnerable to DoS via insufficient DNS domain name length validation 7.5 High -
rubygem-pgRed Hat net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High -
rubygem-pgRed Hat URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+ 3.2 Low -
rubygem-pgRed Hat CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement 4.0 Medium -
rubygem-pgRed Hat CGI has Denial of Service (DoS) potential in Cookie.parse 5.8 Medium -
rubygem-pgRed Hat Net::IMAP vulnerable to possible DoS by memory exhaustion 6.5 Medium -
rubygem-pgRed Hat Foreman: read-only access to entire db from templates 6.3 Medium -
rubygem-pgRed Hat REXML ReDoS vulnerability 6.6 Medium -
rubygem-pgRed Hat Memory leak 7.2 High -
rubygem-pgRed Hat Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore 9.8 Critical -
rubygem-pgRed Hat Puppet-foreman: an authentication bypass vulnerability exists in foreman 9.8 Critical -
rubygem-pgRed Hat REXML denial of service vulnerability 5.9 Medium -
rubygem-pgRed Hat Django SQL injection vulnerability 7.3 High -
rubygem-pgRed Hat HPACK table poisoning in gRPC C++, Python & Ruby 6.3 Medium -
rubygem-pgRed Hat REXML DoS vulnerability 5.3 Medium -
rubygem-pgRed Hat REXML DoS vulnerability 5.3 Medium -
rubygem-pgRed Hat Denial of service in REXML 4.3 Medium -
rubygem-pgRed Hat Django vulnerable to Denial of Service 7.5 High -
rubygem-pgRed Hat Django Path Traversal vulnerability 4.3 Medium -
rubygem-pgRed Hat Django vulnerable to user enumeration attack 5.3 Medium -
rubygem-pgRed Hat Django vulnerable to Denial of Service 7.5 High -
rubygem-pgRed Hat Denial of Service via crafted zip file in jaraco/zipp 6.2 Medium -
rubygem-pgRed Hat Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
rubygem-pgRed Hat REXML contains a denial of service vulnerability 5.3 Medium -
rubygem-pgRed Hat Regular Expression Denial of Service in micromatch 5.3 Medium -
rubygem-pgRed Hat An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the... 6.6 Medium -
rubygem-pgRed Hat RDoc RCE vulnerability with .rdoc_options 4.5 Medium -
rubygem-pgRed Hat StringIO buffer overread vulnerability 9.8 Critical -
rubygem-pgRed Hat node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation 6.5 Medium -
rubygem-pgRed Hat URI gem has ReDoS vulnerability 5.3 Medium -
rubygem-pgRed Hat Ruby Time component ReDoS issue 5.3 Medium -
rubygem-pgRed Hat Ruby URI component ReDoS issue 5.3 Medium -
rubygem-pgRed Hat jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode 7.5 High -
rubygem-pgRed Hat Resource exhaustion in Django 7.5 High - Show olderLoading…