rubygems

Records37All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high21CVSS 7.0–8.9

Exploited now

rubygems records in CISA KEV

No rubygems vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Rubygems.org · all components

TI-2022-11761 CVE-2022-29218

HIGH 67

RubyGems is a package registry used to supply software for the Ruby language ecosystem.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.01309 Published 2022-05-12 No fix listed CWE-269

TI-2024-14379 CVE-2024-21654

MEDIUM 49

Rubygems.org is the Ruby community's gem hosting service.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0048 Published 2024-01-12 No fix listed CWE-287

TI-2022-11719 CVE-2022-29176

MEDIUM 47

Rubygems is a package registry used to supply software for the Ruby language ecosystem.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01938 Published 2022-05-05 No fix listed CWE-862

TI-2023-21039 CVE-2023-40165

LOW 33

rubygems.org is the Ruby community's primary gem (library) hosting service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00459 Published 2023-08-17 Fixed in 2023-08-14 CWE-20