Vulnerability Database
Blog
FAQ
Docs
Vulnerabilities
search
All ecosystems
153609
AlmaLinux
3090
Alpine
3424
Android
2120
Bitnami
4421
Chainguard
13387
CRAN
10
crates.io
1438
Debian
16581
GIT
28678
GitHub Actions
19
Go
3418
Hackage
19
Hex
30
Linux
13573
Maven
5032
npm
18958
NuGet
1353
OSS-Fuzz
3431
Packagist
4008
Pub
8
PyPI
13856
Rocky Linux
1333
RubyGems
1603
SwiftURL
32
Ubuntu
5453
Wolfi
8334
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-cvp8-5r8g-fhvq
RubyGems/omniauth-saml
omniauth-saml vulnerable to Improper Verification of Cryptographic Signature
19 hours ago
Fix available
Severity - 9.9 (Critical)
GHSA-jw9c-mfg7-9rx2
RubyGems/ruby-saml
SAML authentication bypass via Incorrect XPath selector
yesterday
Fix available
Severity - 9.9 (Critical)
GHSA-frp2-5qfc-7r8m
RubyGems/request_store
request_store has Incorrect Default Permissions
23 Aug
Fix available
Severity - 5.9 (Medium)
GHSA-vmwr-mc7x-5vc3
RubyGems/rexml
REXML denial of service vulnerability
22 Aug
Fix available
Severity - 8.2 (High)
GHSA-2m96-52r3-2f3g
RubyGems/fugit
fugit parse and parse_nat stall on lengthy input
19 Aug
Fix available
Severity - 5.3 (Medium)
GHSA-qv32-5wm2-p32h
RubyGems/sequenceserver
Command Injection in sequenceserver
13 Aug
Fix available
Severity - 9.3 (Critical)
GHSA-5866-49gr-22v4
RubyGems/rexml
REXML DoS vulnerability
02 Aug
Fix available
Severity - 6.9 (Medium)
GHSA-r55c-59qm-vjw6
RubyGems/rexml
REXML DoS vulnerability
01 Aug
Fix available
Severity - 6.9 (Medium)
MAL-2024-7834
Not specified
Malicious code in melio-platform-api-client (RubyGems)
28 Jul
No fix available
MAL-2024-7824
Not specified
Malicious code in prnigtest (RubyGems)
27 Jul
No fix available
GHSA-wqw3-p83g-r24v
RubyGems/spina
Cross-Site Request Forgery in Spina
25 Jul
No fix available
Severity - 6.9 (Medium)
GHSA-4xqq-m2hx-25v8
RubyGems/rexml
REXML denial of service vulnerability
16 Jul
Fix available
Severity - 6.9 (Medium)
GHSA-9mvj-f7w8-pvh2
npm/bootstrap
RubyGems/bootstrap
NuGet/bootstrap
RubyGems/bootstrap-sass
NuGet/bootstrap.sass
Packagist/twbs/bootstrap
Maven/org.webjars:bootstrap
Maven/org.webjars.npm:bootstrap
Bootstrap Cross-Site Scripting (XSS) vulnerability
11 Jul
No fix available
Severity - 5.3 (Medium)
GHSA-vc8w-jr9v-vj7f
npm/bootstrap
RubyGems/bootstrap
NuGet/bootstrap
NuGet/bootstrap.sass
Packagist/twbs/bootstrap
Maven/org.webjars:bootstrap
Maven/org.webjars.npm:bootstrap
Bootstrap Cross-Site Scripting (XSS) vulnerability
11 Jul
Fix available
Severity - 5.3 (Medium)
GHSA-529p-jj47-w3m3
RubyGems/decidim-admin
Decidim cross-site scripting (XSS) in the admin panel
10 Jul
Fix available
Severity - 6.8 (Medium)
GHSA-7cx8-44pc-xv3q
RubyGems/decidim
Decidim cross-site scripting (XSS) in the pagination
10 Jul
Fix available
Severity - 6.3 (Medium)
Load more...
RubyGems - OSV