Vulnerabilities

TI-2021-11798 CVE-2021-31799 · GHSA-ggxm-pgc9-g7fp

In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is…

LOW 36

In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0148 Published 2021-07-29 Partial fix · 6.1.2.1, 6.2.1.1 +1 CWE-78

TI-2013-00190 CVE-2013-0256 · GHSA-v2r9-c84j-v7xm

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby…

LOW 26

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02992 Published 2013-03-01 Partial fix · 3.12.1 CWE-79

Vulnerabilities

Filters

In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is…

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby…