Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-6j52-38f8-qhxr
  • RubyGems/shopify_app
 Shopify App: Token exchange shop context confusion may allow cross-shop... yesterday
  • Fix available
  • Severity - 7.6 (High)
GHSA-8vfg-2r28-hvhj
  • RubyGems/crass
 Crass: Non-ASCII characters cause superlinear CPU consumption yesterday
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-wwpr-jff3-395c
  • RubyGems/crass
 Crass: A large number of adjacent CSS comments can trigger a SystemStackError yesterday
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-6jxj-px6v-747w
  • RubyGems/crass
 Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or... yesterday
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-pq4g-8rxf-4g29
  • RubyGems/crass
 Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass 2 days ago
  • Fix available
  • Severity - 5.3 (Medium)
MAL-2026-18126
  • RubyGems/zzhelloworld_socktest
 Malicious code in zzhelloworld_socktest (RubyGems) 21 Oct
  • No fix available
GHSA-6wmf-3r64-vcwv
  • RubyGems/crass
 Crass : Large numeric exponents cause CPU and memory denial of service 20 Oct
  • Fix available
  • Severity - 8.9 (High)
MAL-2026-17786
  • RubyGems/eth-gas-oracle
 Malicious code in eth-gas-oracle (RubyGems) 11 Oct
  • No fix available
MAL-2026-17791
  • RubyGems/multichain-rpc
 Malicious code in multichain-rpc (RubyGems) 11 Oct
  • No fix available
MAL-2026-17801
  • RubyGems/web3-signer-kit
 Malicious code in web3-signer-kit (RubyGems) 11 Oct
  • No fix available
MAL-2026-17790
  • RubyGems/mev-sandwich-detect
 Malicious code in mev-sandwich-detect (RubyGems) 11 Oct
  • No fix available
MAL-2026-17782
  • RubyGems/crypto-tax-export
 Malicious code in crypto-tax-export (RubyGems) 11 Oct
  • No fix available
MAL-2026-17779
  • RubyGems/airdrop-eligibility-check
 Malicious code in airdrop-eligibility-check (RubyGems) 11 Oct
  • No fix available
MAL-2026-17781
  • RubyGems/btc-fee-estimator
 Malicious code in btc-fee-estimator (RubyGems) 11 Oct
  • No fix available
MAL-2026-17783
  • RubyGems/defi-yield-calculator
 Malicious code in defi-yield-calculator (RubyGems) 11 Oct
  • No fix available
MAL-2026-17796
  • RubyGems/staking-apr-fetcher
 Malicious code in staking-apr-fetcher (RubyGems) 11 Oct
  • No fix available
Load more...