Filter
AND

Versions

1.9.3
16
2.0.0
15
1.9
13
1.9.2
12
1.8.6
11
1.9.1
11
1.9.3-p0
11
1.9.3-p125
11
1.9.3-p194
11
2.0.0-p0
11
1.8.7
10
2.0
10
2.0.0-rc1
10
2.0.0-rc2
10
1.9.3-p286
8
1.9.3-p383
8
2.0.0-p195
8
2.0.0-preview1
8
2.0.0-preview2
8
1.8.7-p22
7
2.0.0-p247
7
1.8
6
1.8.5
6
1.8.7-p71
6
1.9.3-p385
6
1.9.3-p392
6
1.8.1
5
1.8.7-p17
5
1.8.7-p72
5
1.8.7-preview1
5
1.8.7-preview2
5
1.8.7-preview3
5
1.8.7-preview4
5
1.9.0
5
1.9.3-p426
5
1.9.3-p429
5
2.1.1
5
1.8.2
4
1.8.3
4
1.8.4
4
1.8.6-p110
4
1.8.6-p36
4
2.1.2
4
2.4.0
4
2.5.0
4
1.6
3
1.8.0
3
1.8.6-p111
3
1.8.6-p114
3
1.8.6-p230
3
1.8.6-preview1
3
1.8.6-preview2
3
1.8.6-preview3
3
1.8.7-330
3
1.9.0-r18423
3
2.0.0-p451
3
2.0.0-p481
3
2.0.0-p576
3
2.1
3
2.1-preview1
3
2.1.3
3
2.2.0
3
2.6.0
3
1.6.7
2
1.6.8
2
1.8.2_pre1
2
1.8.2_pre2
2
1.8.6-p286
2
1.8.7-160
2
1.8.7-173
2
1.8.7-248
2
1.8.7-249
2
1.8.7-299
2
1.8.7-302
2
1.8.7-334
2
1.8.7-p160
2
1.8.7-p173
2
1.8.7-p174
2
1.8.7-p21
2
1.8.7-p248
2
1.8.7-p249
2
1.8.7-p299
2
1.8.7-p301
2
1.8.7-p302
2
1.8.7-p330
2
1.8.7-p334
2
1.8.7-p352
2
1.8.7-p357
2
1.8.7-p358
2
1.8.7-p370
2
1.8.8-dev
2
1.9-r18423
2
1.9.0-0
2
1.9.0-1
2
1.9.0-2
2
1.9.0-20060415
2
1.9.0-20070709
2
1.9.1--p0
2
1.9.1--p129
2
1.9.1--p243
2
1.9.1--p376
2
1.9.1--p429
2
1.9.1--preview_1
2
1.9.1--preview_2
2
1.9.1--rc1
2
1.9.1--rc2
2
1.9.2-dev
2
1.9.2-p136
2
1.9.3-p448
2
1.9.3-p545
2
1.9.3-p547
2
2.0.0-p594
2
2.1.4
2
2.3.0
2
2.4.7
2
2.5.6
2
2.6.4
2
1.6.1
1
1.6.2
1
1.6.3
1
1.6.4
1
1.6.5
1
1.6.6
1
1.8.1--9
1
1.8.2-preview2
1
1.8.2-preview3
1
1.8.2-preview4
1
1.8.3-preview1
1
1.8.3-preview2
1
1.8.3-preview3
1
1.8.4-preview1
1
1.8.4-preview2
1
1.8.4-preview3
1
1.8.5-p11
1
1.8.5-p113
1
1.8.5-p114
1
1.8.5-p115
1
1.8.5-p12
1
1.8.5-p2
1
1.8.5-p231
1
1.8.5-p35
1
1.8.5-p52
1
1.8.5-preview1
1
1.8.5-preview2
1
1.8.5-preview3
1
1.8.5-preview4
1
1.8.5-preview5
1
1.8.6-26
1
1.8.6-420
1
1.8.6-p287
1
1.8.7-p371
1
1.8.7-p373
1
1.9.0.1
1
1.9.2-p180
1
1.9.3-dev
1
2.0.0-p353
1
2.0.0-p598
1
2.0.0-p643
1
2.1.0
1
2.1.5
1
2.5.7
1
2.6.0-preview1
1
2.6.5
1
2.7.0
1

Ruby REXMLREXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parse…

First published (updated )

RubyBuffer Overflow

First published (updated )

redhat/rubyInfoleak

First published (updated )

RubyInput Validation

First published (updated )

RubyVarious methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Fo…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/rubyRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If …

First published (updated )

redhat/rubyRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within Fil…

First published (updated )

RubyArray#pack method converts the receiver’s contents into a string with specified format. If the recei…

First published (updated )

redhat/rubyLast updated 24 July 2024

First published (updated )

debian/ruby1.8Command Injection, CRLF Injection

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

RubyGemsRubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostn…

First published (updated )

RubyXEE

First published (updated )

RubyXEE

First published (updated )

RubyBuffer Overflow

First published (updated )

RubyThe openssl extension in Ruby 2.x does not properly maintain the state of process memory after a fil…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Wicked RubyPath Traversal

First published (updated )

RubyBuffer Overflow

First published (updated )

Ruby(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, …

First published (updated )

RubyGemsAlgorithmic complexity vulnerability in Gem::Version::ANCHORED_VERSION_PATTERN in lib/rubygems/versi…

First published (updated )

RubyGemsAlgorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in …

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Phusion Passengerext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to …

First published (updated )

RubyThe OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7…

First published (updated )

Plataformatec DeviseIncorrect Type Cast

First published (updated )

rubygems/ldoceInput Validation

First published (updated )

RubyInput Validation, XEE

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

RubyXSS

First published (updated )

Phusion PassengerPhusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a de…

First published (updated )

RubyThe rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r…

First published (updated )

RubyRuby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly r…

First published (updated )

RubyRuby 1.9.3-p327 was released to correct a hash-flooding DoS vulnerability that only affects 1.9.x an…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203