RubyGems - OSV

GHSA-4fqr-96q8-xrfx

RubyGems/sqlite3

sqlite3-ruby: Possible SQL query truncation when a string is 4 GiB or larger 15 hours ago

Fix available
Severity - 4.8 (Medium)

GHSA-h7wh-q2qr-458c

RubyGems/rails-html-sanitizer

rails-html-sanitizer: Possible XSS via shared scrubber state in concurrent... 15 hours ago

Fix available
Severity - 4.7 (Medium)

GHSA-cpgf-5mjf-73p7

RubyGems/rails-html-sanitizer

rails-html-sanitizer: Possible regular expression denial of service with... 16 hours ago

Fix available
Severity - 5.3 (Medium)

MAL-2026-19242

RubyGems/tdesign-vue-mono

Malicious code in tdesign-vue-mono (RubyGems) 16 hours ago

No fix available

GHSA-f3w6-w445-fwh9

RubyGems/activestorage

Active Storage: Possible arbitrary file write and read in image analysis yesterday

Fix available
Severity - 9.8 (Critical)

GHSA-rwvh-fw6r-pwvp

RubyGems/actionpack

Action Pack: Possible DoS vulnerability in Action Controller Live streaming yesterday

Fix available
Severity - 5.9 (Medium)

GHSA-x6mj-8jx9-qhqv

RubyGems/actionpack

Action Pack: Possible sensitive session information leak in Active Storage... yesterday

Fix available
Severity - 6.8 (Medium)

GHSA-v6rj-xm57-3p59

RubyGems/actionview

Action View: Possible XSS vulnerability in highlight helper yesterday

Fix available
Severity - 6.1 (Medium)

GHSA-rq8q-p985-fjq7

RubyGems/actionview

Action View: Possible XSS vulnerability in strip_tags yesterday

Fix available
Severity - 6.1 (Medium)

GHSA-2p2f-4rq4-gjwc

RubyGems/actionview

Action View: Possible XSS vulnerability in text helpers yesterday

Fix available
Severity - 6.1 (Medium)

GHSA-3w93-6hmw-whh4

RubyGems/activestorage

Active Storage: Unsigned Content-Type in GCS direct uploads with cache_control yesterday

Fix available
Severity - 4.7 (Medium)

GHSA-wm3x-v3qw-4jh3

RubyGems/actionpack

Action Pack: Possible Strong Parameters Bypass in Parameters#each_key yesterday

Fix available
Severity - 7.5 (High)

GHSA-73v3-wf97-vpgj

RubyGems/msgpack

msgpack-ruby JRuby decoder makes uncapped header-count allocations; a 5-byte... yesterday

Fix available
Severity - 7.5 (High)

GHSA-9crm-g4mf-wc5j

RubyGems/addressable

Addressable display_uri can show misleading hosts with invalid Punycode... yesterday

Fix available
Severity - 4.3 (Medium)

GHSA-539f-xcgw-2gjg

RubyGems/addressable

Addressable display_uri can show misleading hosts containing bidi and invisible... yesterday

Fix available
Severity - 3.1 (Low)

GHSA-qq38-m9mg-xjj5

RubyGems/addressable

Addressable: Denial of service in URI path normalization yesterday

Fix available
Severity - 5.9 (Medium)

Vulnerabilities