rubygems vulnerabilities
7 published CVEs name rubygems among the affected products.
- 7Published CVEs7 of them scored
- 0Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-35221
Denial of service when publishing a package on rubygems.org
rubygems · rubygems.org
Medium4.3 - CVE-2024-21654
rubygems.org MFA Bypass through password reset function could allow account takeover
rubygems · rubygems.org
Medium4.8 - CVE-2023-40165
Unauthorized gem replacement for full names ending in numbers on rubygems.org
rubygems · rubygems.org
High7.4 - CVE-2022-36073
RubyGems allows creation of users with arbitrary unverified emails
rubygems · rubygems.org
High8.3 - CVE-2022-29218
Unauthorized takeover for new versions of some platform-specific gems
rubygems · rubygems.org
High7.7 - CVE-2022-29176
Unauthorized gem takeover for some gems on rubygems.org
rubygems · rubygems.org
Critical9.9 - CVE-2021-43809
Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile
rubygems · rubygems
Medium6.7