RU
Vendor
ruby
15
CVEs
0
On KEV
0
New 30D
Products
NE9.8
net-imap
ruby
8 CVEs0 on KEV0 new
JS9.1
json
ruby
3 CVEs0 on KEV0 new
RE7.5
resolv
Ruby
2 CVEs0 on KEV0 new
ER8.1
erb
ruby
1 CVEs0 on KEV0 new
ZL9.8
zlib
ruby
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-80213 | RE resolv Ruby | 4.0 | Aug 27 | An issue was discovered in the resolv gem before 0.7.2 for Ruby |
| CVE-2026-80212 | RE resolv Ruby | 7.5 | Aug 27 | An issue was discovered in the resolv gem before 0.7.2 for Ruby |
| CVE-2026-71847 | JS json ruby | 8.7 | Aug 7 | Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams |
| CVE-2026-54696 | JS json ruby | 3.7 | Jun 30 | Ruby JSON: JSON generator heap buffer overflow when streaming to an IO |
| CVE-2026-47242 | NE net-imap ruby | 5.8 | Jun 22 | Net::IMAP: Command Injection via ID command argument |
| CVE-2026-47240 | NE net-imap ruby | 5.8 | Jun 22 | Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument |
| CVE-2026-47241 | NE net-imap ruby | 2.1 | Jun 22 | Net::IMAP: Denial of Service via incomplete raw argument validation |
| CVE-2026-42258 | NE net-imap ruby | 5.3 | May 9 | net-imap: Command Injection via unvalidated Symbol inputs |
| CVE-2026-42257 | NE net-imap ruby | 9.8 | May 9 | net-imap: Command Injection via "raw" arguments to multiple commands |
| CVE-2026-42256 | NE net-imap ruby | 6.5 | May 9 | net-imap: Denial of service via high iteration count for `SCRAM-*` authentication |
| CVE-2026-42245 | NE net-imap ruby | 7.5 | May 9 | net-imap: Quadratic complexity when reading response literals |
| CVE-2026-42246 | NE net-imap ruby | 7.4 | May 9 | net-imap vulnerable to STARTTLS stripping via invalid response timing |
| CVE-2026-41316 | ER erb ruby | 8.1 | Apr 24 | ERB has an @_init deserialization guard bypass via def_module / def_method / def_class |
| CVE-2026-27820 | ZL zlib ruby | 9.8 | Apr 16 | zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption |
| CVE-2026-33210 | JS json ruby | 9.1 | Mar 20 | Ruby JSON has a format string injection vulnerability |