rubygems vulnerabilities (TuxCare)
38 vulnerabilities.
rubygemsTuxCareInteger Overflow or Wraparound in GitLab10.0 CriticalrubygemsTuxCareInteger Overflow or Wraparound in GitLab10.0 CriticalrubygemsTuxCareInteger Overflow or Wraparound in GitLab9.9 CriticalrubygemsTuxCareAn issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder...4.0 MediumrubygemsTuxCareAn issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,...7.5 HighrubygemsTuxCareNet::IMAP: Denial of Service via incomplete raw argument validation2.1 LowrubygemsTuxCareNet::IMAP: Command Injection via non-synchronizing literal in "raw" argument5.8 MediumrubygemsTuxCarenet-imap: Command Injection via "raw" arguments to multiple commands5.8 MediumrubygemsTuxCarenet-imap: Command Injection via unvalidated Symbol inputs5.8 MediumrubygemsTuxCareERB has an @_init deserialization guard bypass via def_module / def_method / def_class8.1 HighrubygemsTuxCarezlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption1.7 LowrubygemsTuxCareURI Credential Leakage Bypass over CVE-2025-272212.1 LowrubygemsTuxCareREXML has a DoS condition when parsing malformed XML file1.2 LowrubygemsTuxCareresolv vulnerable to DoS via insufficient DNS domain name length validation7.5 HighrubygemsTuxCarenet-imap vulnerable to STARTTLS stripping via invalid response timing7.6 HighrubygemsTuxCareURI allows for userinfo Leakage in URI#join, URI#merge, and URI#+3.2 LowrubygemsTuxCareCGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement4.0 MediumrubygemsTuxCareCGI has Denial of Service (DoS) potential in Cookie.parse5.8 MediumrubygemsTuxCareREXML ReDoS vulnerability6.6 MediumrubygemsTuxCareREXML denial of service vulnerability5.9 MediumrubygemsTuxCareREXML DoS vulnerability5.3 MediumrubygemsTuxCareREXML DoS vulnerability5.3 MediumrubygemsTuxCareDenial of service in REXML4.3 MediumrubygemsTuxCareRDoc RCE vulnerability with .rdoc_options4.5 MediumrubygemsTuxCareStringIO buffer overread vulnerability9.8 CriticalrubygemsTuxCareURI gem has ReDoS vulnerability5.3 MediumrubygemsTuxCareRuby Time component ReDoS issue5.3 MediumrubygemsTuxCareRuby URI component ReDoS issue5.3 MediumrubygemsTuxCareThere is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1...7.5 HighrubygemsTuxCareCookie Prefix Spoofing in CGI::Cookie.parse7.5 HighrubygemsTuxCareREXML round-trip instability7.5 HighrubygemsTuxCareAn exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function...9.8 CriticalrubygemsTuxCareAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 CriticalrubygemsTuxCareAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 CriticalrubygemsTuxCareAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 CriticalrubygemsTuxCareAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 CriticalrubygemsTuxCareAn exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize"...9.8 CriticalrubygemsTuxCareType confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different...9.8 Critical