rubygem-rake vulnerabilities (Red Hat)
229 vulnerabilities.
rubygem-rakeRed HatA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files....8.8 Highrubygem-rakeRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumrubygem-rakeRed HatCSRF Vulnerability in rails-ujs6.5 Mediumrubygem-rakeRed HatRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 Highrubygem-rakeRed HatDeserialization of untrusted data in Jackson Databind8.1 Highrubygem-rakeRed HatDeserialization of untrusted data in Jackson Databind8.1 Highrubygem-rakeRed HatDeserialization of untrusted data in Jackson Databind8.1 Highrubygem-rakeRed HatInsecure path handling in Bundler7.8 Highrubygem-rakeRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 Highrubygem-rakeRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumrubygem-rakeRed HatCircumvention of file size limits in ActiveStorage7.5 Highrubygem-rakeRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highrubygem-rakeRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalrubygem-rakeRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 Highrubygem-rakeRed HatImproper Input Validation in Hibernate Validator5.3 Mediumrubygem-rakeRed HatAn issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim...5.3 Mediumrubygem-rakeRed HatUnsafe object creation in json RubyGem7.5 Highrubygem-rakeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 Highrubygem-rakeRed HatDenial of Service in Netty7.5 Highrubygem-rakeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highrubygem-rakeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highrubygem-rakeRed HatPossible XSS vulnerability in ActionView4.0 Mediumrubygem-rakeRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 Highrubygem-rakeRed HatSQL injection in Django8.8 Highrubygem-rakeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalrubygem-rakeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalrubygem-rakeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalrubygem-rakeRed HatImproper Certificate Validation in Puppet6.5 Mediumrubygem-rakeRed HatThe default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a...9.8 Criticalrubygem-rakeRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticalrubygem-rakeRed HatHTTP Request Smuggling in Netty7.5 Highrubygem-rakeRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumrubygem-rakeRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumrubygem-rakeRed HatVersions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token...6.5 Mediumrubygem-rakeRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumrubygem-rakeRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 Mediumrubygem-rakeRed Hatmcollective has a default password set at install9.8 Criticalrubygem-rakeRed HatKatello cleartext password storage issue4.1 Mediumrubygem-rakeRed Hatopenshift-origin-node Improper Input Validation vulnerability5.5 Mediumrubygem-rakeRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the...8.1 Highrubygem-rakeRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting....5.3 Mediumrubygem-rakeRed HatWEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4...7.5 Highrubygem-rakeRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within...6.5 Mediumrubygem-rakeRed HatAn integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9...9.8 Criticalrubygem-rakeRed HatDouble Free in psutil7.5 Highrubygem-rakeRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Mediumrubygem-rakeRed HatApache MINA SSLFilter security Issue7.5 Highrubygem-rakeRed HatRubyzip denial of service5.5 Mediumrubygem-rakeRed HatInsecure Deserialization in Apache Commons Beanutils7.3 Highrubygem-rakeRed HatAn authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,...6.5 Medium- Show moreLoading…