Ruby resolv vulnerabilities

3 published CVEs name Ruby resolv among the affected products.

Critical 0High 2Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-80213
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking…
Ruby · resolv
Medium4.0
CVE-2026-80212
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class, Resolv::DNS::Resource::Generic.create, and…
Ruby · resolv
High7.5
CVE-2025-24294
The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name…
Ruby · resolv
High7.5