Rubygems vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

RU

Product

Rubygems

by Rubygems · last CVE Sep 7, 2022

25

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities25 In the news0 Timeline

Severity mix

Critical 3High 13Medium 3Low 0

Severity

All severities25 Critical3 High13 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Rubygems to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-36073	8.8	1%	Sep 7	RubyGems.org is the Ruby community gem host Affected: before 2022-08-31
CVE-2019-8324	8.8	3%	Jun 17	An issue was discovered in RubyGems 2.6 and later through 3.0.2 Affected: 2.6.0 through 3.0.2
CVE-2017-0902	8.1	5%	Aug 31	RubyGems version 2.6.12 and earlier is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and install gems from a… Affected: through 2.6.12
CVE-2018-1000074	7.8	3%	Mar 13	RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk… Affected: through 2.2.9; through 2.3.6; through 2.4.3; through 2.5.0
CVE-2019-8323	7.5	3%	Jun 17	An issue was discovered in RubyGems 2.6 and later through 3.0.2 Affected: 2.6.0 through 3.0.2
CVE-2019-8322	7.5	3%	Jun 17	An issue was discovered in RubyGems 2.6 and later through 3.0.2 Affected: 2.6.0 through 3.0.2
CVE-2019-8321	7.5	3%	Jun 17	An issue was discovered in RubyGems 2.6 and later through 3.0.2 Affected: 2.6.0 through 3.0.2
CVE-2019-8325	7.5	3%	Jun 17	An issue was discovered in RubyGems 2.6 and later through 3.0.2 Affected: 2.6.0 through 3.0.2
CVE-2018-1000075	7.5	5%	Mar 13	RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk… Affected: through 2.2.9; through 2.3.6; through 2.4.3; through 2.5.0
CVE-2018-1000073	7.5	5%	Mar 13	RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk… Affected: through 2.2.9; through 2.3.6; through 2.4.3; through 2.5.0
CVE-2017-0901	7.5	29%	Aug 31	RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem Affected: through 2.6.12
CVE-2017-0900	7.5	8%	Aug 31	RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query`… Affected: through 2.6.12
CVE-2019-8320	7.4	4%	Jun 6	A Directory Traversal issue was discovered in RubyGems 2.7.6 and later through 3.0.2 Affected: 2.7.6 through 3.0.2