rubygem-pg vulnerabilities (Red Hat)
108 vulnerabilities.
rubygem-pgRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 Highrubygem-pgRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumrubygem-pgRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highrubygem-pgRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumrubygem-pgRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highrubygem-pgRed HatUncontrolled Recursion in Loofah7.5 Highrubygem-pgRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumrubygem-pgRed HatInefficient Regular Expression Complexity in Loofah7.5 Highrubygem-pgRed HatRemote Code execution in SnakeYAML8.3 Highrubygem-pgRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumrubygem-pgRed HatHTTP response splitting in CGI8.8 Highrubygem-pgRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalrubygem-pgRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highrubygem-pgRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highrubygem-pgRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highrubygem-pgRed HatDoS in SnakeYAML6.5 Mediumrubygem-pgRed HatDoS in SnakeYAML6.5 Mediumrubygem-pgRed HatDoS in SnakeYAML6.5 Mediumrubygem-pgRed HatDoS in SnakeYAML6.5 Mediumrubygem-pgRed HatDenial of Service (DoS)7.5 Highrubygem-pgRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highrubygem-pgRed HatActive Record RCE bug with Serialized Columns9.8 Criticalrubygem-pgRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalrubygem-pgRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumrubygem-pgRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumrubygem-pgRed HatThere is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1...7.5 Highrubygem-pgRed HatA double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2....9.8 Criticalrubygem-pgRed HatCookie Prefix Spoofing in CGI::Cookie.parse7.5 Highrubygem-pgRed HatLocal Code Execution through Argument Injection via dash leading git url parameter in Gemfile6.7 Mediumrubygem-pgRed HatRegular expression denial of service vulnerability (ReDoS) in date7.5 Highrubygem-pgRed HatAn issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net:...7.4 Highrubygem-pgRed HatArbitrary Code Execution in Rdoc7.0 Highrubygem-pgRed HatAn issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A...5.8 Mediumrubygem-pgRed HatDependency Confusion in Bundler8.8 Highrubygem-pgRed HatREXML round-trip instability7.5 Highrubygem-pgRed HatWEBRick vulnerable to HTTP Request/Response Smuggling7.5 Highrubygem-pgRed HatInsecure path handling in Bundler7.8 Highrubygem-pgRed HatAn issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim...5.3 Mediumrubygem-pgRed HatUnsafe object creation in json RubyGem7.5 Highrubygem-pgRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the...8.1 Highrubygem-pgRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting....5.3 Mediumrubygem-pgRed HatWEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4...7.5 Highrubygem-pgRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within...6.5 Mediumrubygem-pgRed HatAn integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9...9.8 Criticalrubygem-pgRed HatRubyGems Escape sequence injection in errors7.5 Highrubygem-pgRed HatCode injection in RubyGems8.8 Highrubygem-pgRed HatRubyGems Escape sequence injection vulnerability in api response handling7.5 Highrubygem-pgRed HatRubyGems Escape sequence injection vulnerability in gem owner7.5 Highrubygem-pgRed HatRubyGems Escape sequence injection vulnerability in verbose7.5 Highrubygem-pgRed HatRubyGems Delete directory using symlink when decompressing tar7.4 High- Show moreLoading…