HackerOne RubyGems vulnerabilities
4 published CVEs name HackerOne RubyGems among the affected products.
- Published CVEs
- 4
- Last 12 months
- 0
- Critical
- 2
- Known exploited
- 0
Critical 2High 2Medium 0Low 0Not scored 0
Newest CVEs
- CVE-2017-0903
RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can…
HackerOne · RubyGems
Critical9.8 - CVE-2017-0902
RubyGems version 2.6.12 and earlier is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and…
HackerOne · RubyGems
High8.1 - CVE-2017-0901
RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the…
HackerOne · RubyGems
High7.5 - CVE-2017-0899
RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem…
HackerOne · RubyGems
Critical9.8