Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
will_paginate Cross-site Scripting vulnerability CVE-2013-6459, GHSA-8r6h-7x9g-xmw9 | Medium | 2.2% | 31 Dec, 2013 | RubyGems will_paginate |
Webbynode Code Injection vulnerability CVE-2013-7086, GHSA-p65m-qr5x-rrqq | High | 3.5% | 19 Dec, 2013 | RubyGems webbynode |
sprout Arbitrary Code Execution vulnerability CVE-2013-6421, GHSA-229r-pqp6-8w6g | High | 2.0% | 12 Dec, 2013 | RubyGems sprout |
Denial of service in ruby-openid CVE-2013-1812, GHSA-6c8p-qphv-668v | Medium | 2.1% | 12 Dec, 2013 | RubyGems ruby-openid |
Sup Code Injection vulnerability CVE-2013-4479, GHSA-hh2x-7mf9-78fr | Medium | 3.2% | 07 Dec, 2013 | RubyGems sup |
Sup Code Injection vulnerability CVE-2013-4478, GHSA-5f2p-6vjv-2q2m | Medium | 2.1% | 07 Dec, 2013 | RubyGems sup |
actionpack allows bypass of database-query restrictions CVE-2013-6417, GHSA-wpw7-wxjm-cw8r | Medium | 2.4% | 07 Dec, 2013 | RubyGems actionpack |
actionpack Cross-site Scripting vulnerability CVE-2013-6416, GHSA-w37c-q653-qg95 | Medium | 2.0% | 07 Dec, 2013 | RubyGems actionpack |
actionpack vulnerable to Cross-site Scripting CVE-2013-6415, GHSA-6h5q-96hp-9jgm | Medium | 3.2% | 07 Dec, 2013 | RubyGems actionpack |
actionpack Improper Input Validation vulnerability CVE-2013-6414, GHSA-mpxf-gcw2-pw5q | Medium | 20.7% | 07 Dec, 2013 | RubyGems actionpack |
i18n gem Cross-site Scripting vulnerability CVE-2013-4492, GHSA-r5hc-9xx5-97rw | Medium | 2.2% | 07 Dec, 2013 | RubyGems i18n |
actionpack vulnerable to Cross-site Scripting CVE-2013-4491, GHSA-699m-mcjm-9cw8 | Medium | 2.2% | 07 Dec, 2013 | RubyGems actionpack |
Cocaine Gem OS Command Injection vulnerability CVE-2013-4457, GHSA-c43v-hrmg-56r4 | Medium | 2.0% | 02 Nov, 2013 | RubyGems cocaine |
RubyGems Regular Expression Denial of Service CVE-2013-4363, GHSA-9qvm-2vhf-q649 | Medium | 1.7% | 17 Oct, 2013 | RubyGems rubygems-update |
RubyGems Regular Expression Denial of Service vulnerability CVE-2013-4287, GHSA-9j7m-rjqx-48vh | Medium | 3.3% | 17 Oct, 2013 | RubyGems rubygems-update |
actionmailer email address processing causes Denial of service CVE-2013-4389, GHSA-rg5m-3fqp-6px8 | Medium | 3.1% | 17 Oct, 2013 | RubyGems actionmailer |
rgpg Code Injection vulnerability CVE-2013-4203, GHSA-jg4m-q6w8-vrjp | High | 2.1% | 11 Oct, 2013 | RubyGems rgpg |
RubyGems does not verify SSL certificate CVE-2012-2126, GHSA-5mgj-mvv8-46mw | Medium | 1.4% | 01 Oct, 2013 | RubyGems rubygems-update |
RubyGems HTTPS to HTTP redirect CVE-2012-2125, GHSA-228f-g3h7-3fj3 | Medium | 2.5% | 01 Oct, 2013 | RubyGems rubygems-update |
insecure temporary directory usage in passenger CVE-2013-4136, GHSA-w6rc-q387-vpgq | Medium | 0.3% | 30 Sep, 2013 | RubyGems passenger |
Sounder Contains Arbitrary Command Execution Vulnerability CVE-2013-5647, GHSA-rfmf-rx8w-935w | High | 2.0% | 29 Aug, 2013 | RubyGems sounder |
Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service CVE-2013-4761, GHSA-cj43-9h3w-v976 | Medium | 1.6% | 20 Aug, 2013 | RubyGems puppet |
Puppet Improper Input Validation vulnerability CVE-2013-3567, GHSA-f7p5-w2cr-7cp7 | High | 3.4% | 19 Aug, 2013 | RubyGems puppet |
md2pdf allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename CVE-2013-1948, GHSA-99ch-8mvp-g7m5 | Critical | 2.2% | 25 Apr, 2013 | RubyGems md2pdf |
Shell Metacharacter Injection in kelredd-pruview CVE-2013-1947, GHSA-78j3-7wpm-qhvp | Critical | 1.6% | 25 Apr, 2013 | RubyGems kelredd-pruview |
Karteek Docsplit vulnerable to OS Command Injection CVE-2013-1933, GHSA-4fvg-pwv7-v54g | High | 1.8% | 25 Apr, 2013 | RubyGems karteek-docsplit |
Devise does not properly perform type conversion when performing database queries CVE-2013-0233, GHSA-jxhw-mg8m-2pj8 | Medium | 14.1% | 25 Apr, 2013 | RubyGems devise |
Improper Input Validation in multi_xml CVE-2013-0175, GHSA-pchc-949f-53m5 | High | 3.7% | 25 Apr, 2013 | RubyGems multi_xml |
Active Record component in Ruby on Rails has a data-type injection vulnerability CVE-2013-3221, GHSA-f57c-hx33-hvh8 | Critical | 2.4% | 22 Apr, 2013 | RubyGems activerecord |
Thumbshooter vulnerable to Code Injection CVE-2013-1898, GHSA-7fqj-cg79-f2pv | High | 2.1% | 09 Apr, 2013 | RubyGems thumbshooter |
extlib does not properly restrict casts of string values CVE-2013-1802, GHSA-9h36-4jf2-hx53 | High | 3.4% | 09 Apr, 2013 | RubyGems extlib |
HTTParty does not restrict casts of string values CVE-2013-1801, GHSA-mgx3-27hr-mfgp | High | 4.4% | 09 Apr, 2013 | RubyGems httparty |
crack does not properly restrict casts of string values CVE-2013-1800, GHSA-m7fq-cf8q-35q7 | High | 5.0% | 09 Apr, 2013 | RubyGems crack |
nori contains Improper Input Validation CVE-2013-0285, GHSA-4936-rj25-6wm6 | High | 2.3% | 09 Apr, 2013 | RubyGems nori |
newrelic_rpm Gem Discloses Sensitive Information CVE-2013-0284, GHSA-q6cw-2553-7837 | Medium | 1.3% | 09 Apr, 2013 | RubyGems newrelic_rpm |
omniauth-oauth2 Cross-Site Request Forgery vulnerability CVE-2012-6134, GHSA-fgmx-8h93-26fh | Medium | 1.2% | 09 Apr, 2013 | RubyGems omniauth-oauth2 |
ldoce Gem Arbitrary Command Execution CVE-2013-1911, GHSA-g266-3crh-h7gj | Medium | 2.0% | 03 Apr, 2013 | RubyGems ldoce |
Curl Gem insufficient URL escaping command injection CVE-2013-2617, GHSA-hxx6-p24v-wg8c | High | 4.4% | 20 Mar, 2013 | RubyGems curl |
MiniMagick Gem for Ruby URI Handling Arbitrary Command Injection CVE-2013-2616, GHSA-w754-gq8r-pf5f | High | 3.6% | 20 Mar, 2013 | RubyGems mini_magick |
fastreader Gem for Ruby URI Handling Arbitrary Command Injection CVE-2013-2615, GHSA-w248-xr37-jx8m | High | 2.3% | 20 Mar, 2013 | RubyGems fastreader |
Shell command injection in command_wrap CVE-2013-1875, GHSA-p673-hjf2-pwfr | High | 3.6% | 20 Mar, 2013 | RubyGems command_wrap |
Puppet Improper Input Validation vulnerability CVE-2013-1655, GHSA-574q-fxfj-wv6h | High | 4.6% | 20 Mar, 2013 | RubyGems puppet |
actionpack Cross-site Scripting vulnerability CVE-2013-1857, GHSA-j838-vfpq-fmf2 | Medium | 1.9% | 19 Mar, 2013 | RubyGems actionpack |
activesupport Improper Input Validation vulnerability CVE-2013-1856, GHSA-9c2j-593q-3g82 | Medium | 2.1% | 19 Mar, 2013 | RubyGems activesupport |
actionpack Cross-site Scripting vulnerability CVE-2013-1855, GHSA-q759-hwvc-m3jg | Medium | 2.6% | 19 Mar, 2013 | RubyGems actionpack |
Active Record Improper Input Validation CVE-2013-1854, GHSA-3crr-9vmg-864v | Medium | 3.5% | 19 Mar, 2013 | RubyGems activerecord |
jQuery vulnerable to Cross-Site Scripting (XSS) CVE-2011-4969, GHSA-579v-mp3v-rrw5 | Medium | 19.2% | 08 Mar, 2013 | Maven org.webjars.npm:jquery NuGet jQuery RubyGems jquery-rails npm jquery |
spree_auth_devise allows remote authenticated users to assign themselves arbitrary roles CVE-2013-2506, GHSA-jp57-9j37-5476 | Medium | 1.3% | 08 Mar, 2013 | RubyGems spree_auth_devise |
Spree Improper Input Validation vulnerability CVE-2013-1656, GHSA-jxx8-v83v-rhw3 | Medium | 1.5% | 08 Mar, 2013 | RubyGems spree |
RDoc contains XSS vulnerability CVE-2013-0256, GHSA-v2r9-c84j-v7xm | Medium | 3.0% | 01 Mar, 2013 | RubyGems rdoc |