ruby

Records136All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical18CVSS 9.0–10.0

CVSS high49CVSS 7.0–8.9

Exploited now

ruby records in CISA KEV

TI-2026-71508 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability CRITICAL 100KEV 2026-10-29

Components

Products in the NVD configurations · select one to filter the records

Ruby 93 records CRITICAL Rexml 8 records MEDIUM Net 6 records LOW Cgi 5 records MEDIUM Webrick 5 records MEDIUM Uri 4 records LOW Openssl 2 records MEDIUM Rdoc 2 records LOW

Records

2 records in Openssl · all components

TI-2018-11751 CVE-2018-16395 · GHSA-mmrq-6999-72v8

An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5…

MEDIUM 55

An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.10715 Published 2018-11-16 Partial fix · 2.0.9, 2.1.2

TI-2016-06550 CVE-2016-7798 · GHSA-6h88-qjpv-p32m

The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm)…

LOW 39

The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mecha…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03167 Published 2017-01-30 Partial fix · 2.0.0 CWE-326

Open these records in search →

Critical	18
High	49
Medium	62
Low	7
No CVSS	0