Hackerone Ruby vulnerabilities

• hackerone ruby An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in... CVE-2026-46727 Fix available 8.1 HighMay 21, 2026
• hackerone ruby Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X... CVE-2011-3624 5.3 MediumNovember 26, 2019
• activesupport project activesupport, hackerone active-support ruby gem +1 more active-support impersonates 'activesupport' gem CVE-2018-3779 9.8 CriticalAugust 10, 2018
• hackerone private address check ruby gem, private address check project address check +1 more private_address_check contains race condition CVE-2018-3759 Fix available 3.7 LowJune 13, 2018
• hackerone private address check ruby gem, private address check project address check +1 more private_address_check contains Incomplete List of Disallowed Inputs CVE-2017-0909 Fix available 9.8 CriticalNovember 16, 2017
• hackerone private address check ruby gem, private address check project address check +1 more private_address_check vulnerable to bypass of Resolv.getaddresses method CVE-2017-0904 Fix available 8.1 HighNovember 13, 2017
• hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 more RubyGems vulnerable to Deserialization of Untrusted Data CVE-2017-0903 Fix available EPSS 15.9% 9.8 CriticalOctober 11, 2017
• hackerone ruby Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a... CVE-2017-0898 Fix available 9.1 CriticalSeptember 15, 2017
• hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 more RubyGems has Origin Validation Error vulnerability CVE-2017-0902 Fix available 8.1 HighAugust 31, 2017
• hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 more RubyGems may allow a maliciously crafted gem to overwrite files CVE-2017-0901 Public exploitFix available EPSS 29.4% 7.5 HighAugust 31, 2017
• hackerone rubygems, debian linux, redhat enterprise linux desktop +5 more +7 more RubyGems Code Injection vulnerability CVE-2017-0899 Fix available EPSS 11.1% 9.8 CriticalAugust 31, 2017
• hackerone ruby Type confusion exists in two methods of Ruby's WIN32OLE class, ole_invoke and ole_query_interface... CVE-2016-2336 9.8 CriticalJanuary 6, 2017
• hackerone ruby An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize"... CVE-2016-2339 Fix available 9.8 CriticalJanuary 6, 2017
• hackerone ruby, tcl tcl/tk +1 more Type confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different... CVE-2016-2337 Fix available 9.8 CriticalJanuary 6, 2017
• hackerone ruby, debian linux, puppet agent +2 more +4 more verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x... CVE-2015-1855 Public exploitFix available 5.9 MediumApril 9, 2015