Read the docs

rubygems

Records37All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high21CVSS 7.0–8.9

Exploited now

rubygems records in CISA KEV

No rubygems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Rubygems 25 records MEDIUM Rubygems.org 4 records HIGH Mail Gem 2 records MEDIUM Command Wrap 1 record LOW Fastreader 1 record LOW Json Gem 1 record MEDIUM Mini Magick 1 record LOW

Records

1 record in Json Gem · all components

TI-2013-00203 CVE-2013-0269 · GHSA-x457-cw4h-hq5f

The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows…

Priority MEDIUM 48

The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.13911 Published 2013-02-13 Partial fix · 1.5.5, 1.6.8 +1 CWE-20
Open these records in search →