Ruby Ruby vulnerabilities

CVEs per yearBy the year they were published

1. 20173
2. 20191
3. 20191

Newest CVEs

• CVE-2015-1855

  verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate…

  Ruby · Ruby

  Medium5.9
• CVE-2011-3624

  Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server…

  Ruby · Ruby

  Medium5.3
• CVE-2016-2339

  An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize" function functionality of Ruby. In Fiddle::Function.new "initialize"…

  Ruby · Ruby

  Critical9.8
• CVE-2016-2337

  Type confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different type of object than String as "retval" argument can cause…

  Ruby · Ruby

  Critical9.8
• CVE-2016-2336

  Type confusion exists in two methods of Ruby's WIN32OLE class, ole_invoke and ole_query_interface. Attacker passing different type of object than this assumed…

  Ruby · Ruby

  Critical9.8