Vulnerabilities

TI-2024-14379 CVE-2024-21654

rubygems.org MFA Bypass through password reset function could allow account takeover

MEDIUM 49

Rubygems.org is the Ruby community's gem hosting service.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0048 Published 2024-01-12 No fix listed CWE-287

TI-2023-21039 CVE-2023-40165

LOW 33

rubygems.org is the Ruby community's primary gem (library) hosting service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00459 Published 2023-08-17 Fixed in 2023-08-14 CWE-20

TI-2022-11761 CVE-2022-29218

HIGH 67

RubyGems is a package registry used to supply software for the Ruby language ecosystem.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.01309 Published 2022-05-12 No fix listed CWE-269

TI-2022-11719 CVE-2022-29176

MEDIUM 47

Rubygems is a package registry used to supply software for the Ruby language ecosystem.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01938 Published 2022-05-05 No fix listed CWE-862