rubygems vulnerabilities

7 published CVEs name rubygems among the affected products.

Critical 1High 3Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2024-35221
Denial of service when publishing a package on rubygems.org
rubygems · rubygems.org
Medium4.3
CVE-2024-21654
rubygems.org MFA Bypass through password reset function could allow account takeover
rubygems · rubygems.org
Medium4.8
CVE-2023-40165
Unauthorized gem replacement for full names ending in numbers on rubygems.org
rubygems · rubygems.org
High7.4
CVE-2022-36073
RubyGems allows creation of users with arbitrary unverified emails
rubygems · rubygems.org
High8.3
CVE-2022-29218
Unauthorized takeover for new versions of some platform-specific gems
rubygems · rubygems.org
High7.7
CVE-2022-29176
Unauthorized gem takeover for some gems on rubygems.org
rubygems · rubygems.org
Critical9.9
CVE-2021-43809
Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile
rubygems · rubygems
Medium6.7