Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-jjq7-m736-w977
  • RubyGems/openc3
 OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites) 23 Sep
  • Fix available
  • Severity - 9.9 (Critical)
GHSA-vp3w-52v9-q57f
  • RubyGems/openc3
 OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting 23 Sep
  • Fix available
  • Severity - 8.8 (High)
MAL-2026-16420
  • RubyGems/kerokwis
 Malicious code in kerokwis (RubyGems) 22 Sep
  • No fix available
MAL-2026-16466
  • RubyGems/wurl_show_data
 Malicious code in wurl_show_data (RubyGems) 22 Sep
  • No fix available
MAL-2026-16411
  • RubyGems/no-fun
 Malicious code in no-fun (RubyGems) 22 Sep
  • No fix available
GHSA-4825-p4xm-pcf2
  • RubyGems/spree_api
 Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR) 22 Sep
  • Fix available
  • Severity - 7.1 (High)
GHSA-7952-gx68-cjqr
  • Maven/net.sf.mpxj:mpxj
  • NuGet/MPXJ.Net
  • NuGet/net.sf.mpxj
  • NuGet/net.sf.mpxj-for-csharp
  • NuGet/net.sf.mpxj-for-vb
  • ... 2 more
 MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers 22 Sep
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-5vvx-3h34-f3gj
  • Maven/net.sf.mpxj:mpxj
  • NuGet/MPXJ.Net
  • NuGet/net.sf.mpxj
  • NuGet/net.sf.mpxj-for-csharp
  • NuGet/net.sf.mpxj-for-vb
  • ... 2 more
 MPXJ: XXE Vulnerability in MerlinReader 22 Sep
  • Fix available
  • Severity - 7.5 (High)
MAL-2026-17152
  • RubyGems/mega-clean-box
 Malicious code in mega-clean-box (RubyGems) 22 Sep
  • No fix available
MAL-2026-17151
  • RubyGems/burndler
 Malicious code in burndler (RubyGems) 22 Sep
  • No fix available
MAL-2026-17149
  • RubyGems/burmdler
 Malicious code in burmdler (RubyGems) 22 Sep
  • No fix available
MAL-2026-17150
  • RubyGems/burndlef
 Malicious code in burndlef (RubyGems) 22 Sep
  • No fix available
MAL-2026-17148
  • RubyGems/buosndler
 Malicious code in buosndler (RubyGems) 22 Sep
  • No fix available
MAL-2026-17147
  • RubyGems/buonlder
 Malicious code in buonlder (RubyGems) 22 Sep
  • No fix available
MAL-2026-17146
  • RubyGems/buondler
 Malicious code in buondler (RubyGems) 22 Sep
  • No fix available
MAL-2026-17144
  • RubyGems/buomdler
 Malicious code in buomdler (RubyGems) 22 Sep
  • No fix available
Load more...