TI-2025-05843 CVE-2025-6442 · GHSA-r995-q44h-hr64
Ruby WEBrick read_header HTTP Request Smuggling Vulnerability
Priority LOW 27
Ruby WEBrick read_header HTTP Request Smuggling Vulnerability.
Vulnerabilities
5 records
TI-2020-15633 CVE-2020-25613 · GHSA-gwfg-cqmg-cf8f
An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through…
Priority LOW 39
An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1.
TI-2019-08907 CVE-2019-11879 · GHSA-jwh5-q83f-2jjc
The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had local…
Priority LOW 26
The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had local access to create a symlink to a location outside of the web root directory.
TI-2009-04253 CVE-2009-4492 · GHSA-6mq2-37j5-w6r6
WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248…
Priority MEDIUM 49
WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might al…
TI-2008-01097 CVE-2008-1145 · GHSA-f279-rf2r-m6m5
Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and…
Priority MEDIUM 45
Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash (\) path separators or case-insensitive file names, allow…