rubygems-devel vulnerabilities (TuxCare)
38 vulnerabilities.
rubygems-develTuxCareInteger Overflow or Wraparound in GitLab10.0 Criticalrubygems-develTuxCareInteger Overflow or Wraparound in GitLab10.0 Criticalrubygems-develTuxCareInteger Overflow or Wraparound in GitLab9.9 Criticalrubygems-develTuxCareAn issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder...4.0 Mediumrubygems-develTuxCareAn issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,...7.5 Highrubygems-develTuxCareNet::IMAP: Denial of Service via incomplete raw argument validation2.1 Lowrubygems-develTuxCareNet::IMAP: Command Injection via non-synchronizing literal in "raw" argument5.8 Mediumrubygems-develTuxCarenet-imap: Command Injection via "raw" arguments to multiple commands5.8 Mediumrubygems-develTuxCarenet-imap: Command Injection via unvalidated Symbol inputs5.8 Mediumrubygems-develTuxCareERB has an @_init deserialization guard bypass via def_module / def_method / def_class8.1 Highrubygems-develTuxCarezlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption1.7 Lowrubygems-develTuxCareURI Credential Leakage Bypass over CVE-2025-272212.1 Lowrubygems-develTuxCareREXML has a DoS condition when parsing malformed XML file1.2 Lowrubygems-develTuxCareresolv vulnerable to DoS via insufficient DNS domain name length validation7.5 Highrubygems-develTuxCarenet-imap vulnerable to STARTTLS stripping via invalid response timing7.6 Highrubygems-develTuxCareURI allows for userinfo Leakage in URI#join, URI#merge, and URI#+3.2 Lowrubygems-develTuxCareCGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement4.0 Mediumrubygems-develTuxCareCGI has Denial of Service (DoS) potential in Cookie.parse5.8 Mediumrubygems-develTuxCareREXML ReDoS vulnerability6.6 Mediumrubygems-develTuxCareREXML denial of service vulnerability5.9 Mediumrubygems-develTuxCareREXML DoS vulnerability5.3 Mediumrubygems-develTuxCareREXML DoS vulnerability5.3 Mediumrubygems-develTuxCareDenial of service in REXML4.3 Mediumrubygems-develTuxCareRDoc RCE vulnerability with .rdoc_options4.5 Mediumrubygems-develTuxCareStringIO buffer overread vulnerability9.8 Criticalrubygems-develTuxCareURI gem has ReDoS vulnerability5.3 Mediumrubygems-develTuxCareRuby Time component ReDoS issue5.3 Mediumrubygems-develTuxCareRuby URI component ReDoS issue5.3 Mediumrubygems-develTuxCareThere is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1...7.5 Highrubygems-develTuxCareCookie Prefix Spoofing in CGI::Cookie.parse7.5 Highrubygems-develTuxCareREXML round-trip instability7.5 Highrubygems-develTuxCareAn exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function...9.8 Criticalrubygems-develTuxCareAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalrubygems-develTuxCareAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalrubygems-develTuxCareAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalrubygems-develTuxCareAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalrubygems-develTuxCareAn exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize"...9.8 Criticalrubygems-develTuxCareType confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different...9.8 Critical