Priority CRITICAL 100KEV
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to exec…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.6522 · Published 2026-10-13 · Partial fix · 19.2.8, 19.3.5 +1 CWE-190
Priority LOW 18
An issue was discovered in the resolv gem before 0.7.2 for Ruby.
CVSS 3.1MEDIUM 4.0· Network · No auth · No interaction · EPSS 0.00271 · Published 2026-08-27 · Partial fix · 0.3.2, 0.7.2 CWE-197
Priority LOW 39
An issue was discovered in the resolv gem before 0.7.2 for Ruby.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00401 · Published 2026-08-27 · Partial fix · 0.3.2, 0.7.2 CWE-770
Priority HIGH 77
Ruby JSON is a JSON implementation for Ruby.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00428 · Published 2026-08-07 · Fixed in 2.21.2 CWE-416
Priority MEDIUM 51
Ruby JSON is a JSON implementation for Ruby.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.00412 · Published 2026-06-30 · Partial fix · 2.19.9 CWE-122
Priority LOW 25
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
CVSS 4.0MEDIUM 5.8· Local · No auth · User interaction · EPSS 0.00184 · Published 2026-06-22 · Fixed in 0.6.4.1, 0.5.15 CWE-77
Priority LOW 28
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
CVSS 4.0MEDIUM 5.8· Local · No auth · User interaction · EPSS 0.00831 · Published 2026-06-22 · Fixed in 0.6.4.1, 0.5.15 CWE-77
Priority LOW 17
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
CVSS 4.0LOW 2.1· Network · Low privileges · User interaction · EPSS 0.00382 · Published 2026-06-22 · Fixed in 0.6.4.1, 0.5.15 CWE-162
Priority LOW 38
An issue was discovered in Ruby 4 before 4.0.5.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00478 · Published 2026-05-22 · Fixed in 4.0.5 CWE-362
Priority LOW 27
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
CVSS 4.0MEDIUM 5.8· Local · No auth · User interaction · EPSS 0.00783 · Published 2026-05-09 · Partial fix · 0.4.24, 0.5.14 +1 CWE-77
Priority LOW 26
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
CVSS 4.0MEDIUM 5.8· Local · No auth · User interaction · EPSS 0.00429 · Published 2026-05-09 · Partial fix · 0.4.24, 0.5.14 +1 CWE-77
Priority LOW 27
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
CVSS 4.0MEDIUM 6.0· Network · No auth · User interaction · EPSS 0.00299 · Published 2026-05-09 · Partial fix · 0.4.24, 0.5.14 +1 CWE-1322
Priority LOW 12
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
CVSS 4.0LOW 2.3· Network · No auth · User interaction · EPSS 0.0041 · Published 2026-05-09 · Fixed in 0.4.24, 0.5.14 +1 CWE-407
Priority LOW 35
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
CVSS 4.0HIGH 7.6· Network · No auth · User interaction · EPSS 0.00312 · Published 2026-05-09 · Partial fix · 0.3.10, 0.4.24 +2 CWE-392
Priority MEDIUM 40
ERB is a templating system for Ruby.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.01131 · Published 2026-04-24 · Fixed in 4.0.3.1, 6.0.1.1 +2 CWE-693
Priority LOW 16
zlib is a Ruby interface for the zlib compression/decompression library.
CVSS 4.0LOW 1.7· Network · No auth · No interaction · EPSS 0.00561 · Published 2026-04-16 · Partial fix · 3.0.1, 3.1.2 +1 CWE-120
Priority LOW 38
Ruby JSON is a JSON implementation for Ruby.
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00892 · Published 2026-03-20 · Fixed in 2.15.2.1, 2.17.1.2 +1 CWE-134
Priority LOW 18
URI is a module providing classes to handle Uniform Resource Identifiers.
CVSS 4.0LOW 2.1· Local · No auth · No interaction · EPSS 0.0056 · Published 2025-12-30 · Partial fix · 0.12.5, 0.13.3 +1 CWE-200
Priority LOW 7
REXML is an XML toolkit for Ruby.
CVSS 4.0LOW 1.2· Local · No auth · No interaction · EPSS 0.00248 · Published 2025-09-17 · Partial fix · 3.4.2 CWE-400
Priority MEDIUM 40
The attack vector is a potential Denial of Service (DoS).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00656 · Published 2025-07-12 · Partial fix · 0.2.3, 0.6.2 +1 CWE-400
Priority LOW 27
Ruby WEBrick read_header HTTP Request Smuggling Vulnerability.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00495 · Published 2025-06-25 · Partial fix · 1.8.2 CWE-444
Priority LOW 27
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
CVSS 4.0MEDIUM 6.0· Network · No auth · User interaction · EPSS 0.00494 · Published 2025-04-28 · Partial fix · 0.5.7, 0.4.20 +2 CWE-400
Priority MEDIUM 40
JSON is a JSON implementation for Ruby.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0072 · Published 2025-03-12 · Fixed in 2.10.2 CWE-125
Priority LOW 25
In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00511 · Published 2025-03-03 · Partial fix · 0.11.3, 0.12.4 +2 CWE-212
Priority LOW 34
In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0076 · Published 2025-03-03 · Partial fix · 0.3.5.1, 0.3.7 +1 CWE-1333
Load more
THREATIST.IORead the docs