Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Private Address Check Project Component: Private Address Check Clear all filters
TI-2018-02755 CVE-2018-3759 · GHSA-2xvj-j3qh-x8c3

Race condition in HackerOne private_address_check ruby gem

Priority LOW 19

private_address_check ruby gem before 0.5.0 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition due to the address the socket uses not being checked.

CVSS 3.0LOW 3.7 Network No auth No interaction EPSS 0.0068 Published 2018-06-13 Fixed in 0.5.0 CWE-362
TI-2017-00852 CVE-2017-0904 · GHSA-hxhj-hp9m-qwc4

Improper handling of exceptional conditions in jtdowney private_address_check ruby gem

Priority MEDIUM 40

The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security measures, such as when used to b…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.02415 Published 2017-11-13 Fixed in 0.4.0 CWE-242