ruby

Records136All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical18CVSS 9.0–10.0

CVSS high49CVSS 7.0–8.9

Exploited now

ruby records in CISA KEV

TI-2026-71508 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability CRITICAL 100KEV 2026-10-29

Components

Products in the NVD configurations · select one to filter the records

Ruby 93 records CRITICAL Rexml 8 records MEDIUM Net 6 records LOW Cgi 5 records MEDIUM Webrick 5 records MEDIUM Uri 4 records LOW Openssl 2 records MEDIUM Rdoc 2 records LOW

Records

2 records in Rdoc · all components

TI-2021-11798 CVE-2021-31799 · GHSA-ggxm-pgc9-g7fp

In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is…

LOW 36

In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0148 Published 2021-07-29 Partial fix · 6.1.2.1, 6.2.1.1 +1 CWE-78

TI-2013-00190 CVE-2013-0256 · GHSA-v2r9-c84j-v7xm

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby…

LOW 26

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02992 Published 2013-03-01 Partial fix · 3.12.1 CWE-79

Open these records in search →

Critical	18
High	49
Medium	62
Low	7
No CVSS	0