ruby

Records136All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical18CVSS 9.0–10.0

CVSS high49CVSS 7.0–8.9

Exploited now

ruby records in CISA KEV

TI-2026-71508 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability CRITICAL 100KEV 2026-10-29

Components

Products in the NVD configurations · select one to filter the records

Ruby 93 records CRITICAL Rexml 8 records MEDIUM Net 6 records LOW Cgi 5 records MEDIUM Webrick 5 records MEDIUM Uri 4 records LOW Openssl 2 records MEDIUM Rdoc 2 records LOW

Records

5 records in Webrick · all components

TI-2009-04253 CVE-2009-4492 · GHSA-6mq2-37j5-w6r6

WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248…

MEDIUM 49

WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might al…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.1623 Published 2010-01-13 Fixed in 1.4.0 CWE-20

TI-2008-01097 CVE-2008-1145 · GHSA-f279-rf2r-m6m5

Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and…

MEDIUM 45

Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash (\) path separators or case-insensitive file names, allow…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.27104 Published 2008-03-04 Fixed CWE-22

TI-2020-15633 CVE-2020-25613 · GHSA-gwfg-cqmg-cf8f

An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through…

LOW 39

An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03818 Published 2020-10-06 Partial fix · 1.6.1, 1.5.1 +1 CWE-444

TI-2025-05843 CVE-2025-6442 · GHSA-r995-q44h-hr64

Ruby WEBrick read_header HTTP Request Smuggling Vulnerability

LOW 27

Ruby WEBrick read_header HTTP Request Smuggling Vulnerability.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00495 Published 2025-06-25 Partial fix · 1.8.2 CWE-444

TI-2019-08907 CVE-2019-11879 · GHSA-jwh5-q83f-2jjc

The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had local…

LOW 26

The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had local access to create a symlink to a location outside of the web root directory.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00549 Published 2019-05-10 No fix listed CWE-22

Open these records in search →