rubygem-puma vulnerabilities (Red Hat)
127 vulnerabilities.
rubygem-pumaRed HatInefficient Regular Expression Complexity in Loofah7.5 Highrubygem-pumaRed HatRemote Code execution in SnakeYAML8.3 Highrubygem-pumaRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumrubygem-pumaRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalrubygem-pumaRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highrubygem-pumaRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highrubygem-pumaRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highrubygem-pumaRed HatDoS in SnakeYAML6.5 Mediumrubygem-pumaRed HatDoS in SnakeYAML6.5 Mediumrubygem-pumaRed HatDoS in SnakeYAML6.5 Mediumrubygem-pumaRed HatDoS in SnakeYAML6.5 Mediumrubygem-pumaRed HatDenial of Service (DoS)7.5 Highrubygem-pumaRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highrubygem-pumaRed HatActive Record RCE bug with Serialized Columns9.8 Criticalrubygem-pumaRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalrubygem-pumaRed HatInefficient Regular Expression Complexity in moment7.5 Highrubygem-pumaRed HatThe Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few...5.5 Mediumrubygem-pumaRed HatDenial of Service Vulnerability in Rack Multipart Parsing7.5 Highrubygem-pumaRed HatPossible shell escape sequence injection vulnerability in Rack10.0 Criticalrubygem-pumaRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumrubygem-pumaRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumrubygem-pumaRed HatSQL Injection in Django9.8 Criticalrubygem-pumaRed HatSQL Injection in Django9.8 Criticalrubygem-pumaRed HatHTTP Request Smuggling in puma9.1 Criticalrubygem-pumaRed HatTwo heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the...6.5 Mediumrubygem-pumaRed HatInformation Exposure when using Puma with Rails8.0 Highrubygem-pumaRed HatExposure of sensitive information in Action Pack7.4 Highrubygem-pumaRed HatInfinite Loop in Django7.5 Highrubygem-pumaRed HatCross-site Scripting in Django6.1 Mediumrubygem-pumaRed HatDenial of service in sidekiq7.5 Highrubygem-pumaRed HatDirectory-traversal in Django5.3 Mediumrubygem-pumaRed HatInformation disclosure in Django7.5 Highrubygem-pumaRed HatDenial-of-service in Django7.5 Highrubygem-pumaRed HatA server side remote code execution vulnerability was found in Foreman project. A authenticated...7.2 Highrubygem-pumaRed HatRCE from attacker with configuration edit priviledges through JNDI lookup6.6 Mediumrubygem-pumaRed HatHTML Cleaner allows crafted and SVG embedded scripts to pass through8.2 Highrubygem-pumaRed HatHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Mediumrubygem-pumaRed HatPotential bypass of an upstream access control based on URL paths in Django7.3 Highrubygem-pumaRed HatInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma3.7 Lowrubygem-pumaRed HatRegular Expression Denial of Service in sqlparse7.5 Highrubygem-pumaRed HatBuffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before...7.5 Highrubygem-pumaRed HatBuffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv...7.5 Highrubygem-pumaRed HatBuffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before...7.5 Highrubygem-pumaRed HatBuffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17...7.5 Highrubygem-pumaRed HatBuffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool,...3.3 Lowrubygem-pumaRed HatCross-site Scripting in Sidekiq6.1 Mediumrubygem-pumaRed HatPossible request smuggling in HTTP/2 due missing validation of content-length5.9 Mediumrubygem-pumaRed HatPossible request smuggling in HTTP/2 due missing validation5.9 Mediumrubygem-pumaRed HatLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Mediumrubygem-pumaRed HatWithdrawn Advisory: Improper Certificate Validation in Apache Qpid Proton7.4 High- Show moreLoading…