ruby-default-gems vulnerabilities (TuxCare)
26 vulnerabilities.
-
ruby-default-gemsTuxCare Integer Overflow or Wraparound in GitLab 10.0 Critical -
ruby-default-gemsTuxCare Integer Overflow or Wraparound in GitLab 10.0 Critical -
ruby-default-gemsTuxCare Integer Overflow or Wraparound in GitLab 9.9 Critical -
ruby-default-gemsTuxCare An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder... 4.0 Medium -
ruby-default-gemsTuxCare An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,... 7.5 High -
ruby-default-gemsTuxCare Net::IMAP: Denial of Service via incomplete raw argument validation 2.1 Low -
ruby-default-gemsTuxCare Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument 5.8 Medium -
ruby-default-gemsTuxCare net-imap: Command Injection via "raw" arguments to multiple commands 5.8 Medium -
ruby-default-gemsTuxCare net-imap: Command Injection via unvalidated Symbol inputs 5.8 Medium -
ruby-default-gemsTuxCare ERB has an @_init deserialization guard bypass via def_module / def_method / def_class 8.1 High -
ruby-default-gemsTuxCare zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption 1.7 Low -
ruby-default-gemsTuxCare URI Credential Leakage Bypass over CVE-2025-27221 2.1 Low -
ruby-default-gemsTuxCare REXML has a DoS condition when parsing malformed XML file 1.2 Low -
ruby-default-gemsTuxCare resolv vulnerable to DoS via insufficient DNS domain name length validation 7.5 High -
ruby-default-gemsTuxCare net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High -
ruby-default-gemsTuxCare URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+ 3.2 Low -
ruby-default-gemsTuxCare REXML ReDoS vulnerability 6.6 Medium -
ruby-default-gemsTuxCare REXML denial of service vulnerability 5.9 Medium -
ruby-default-gemsTuxCare REXML DoS vulnerability 5.3 Medium -
ruby-default-gemsTuxCare REXML DoS vulnerability 5.3 Medium -
ruby-default-gemsTuxCare Denial of service in REXML 4.3 Medium -
ruby-default-gemsTuxCare RDoc RCE vulnerability with .rdoc_options 4.5 Medium -
ruby-default-gemsTuxCare StringIO buffer overread vulnerability 9.8 Critical -
ruby-default-gemsTuxCare URI gem has ReDoS vulnerability 5.3 Medium -
ruby-default-gemsTuxCare Ruby Time component ReDoS issue 5.3 Medium -
ruby-default-gemsTuxCare Ruby URI component ReDoS issue 5.3 Medium