RubyGems - OSV

GHSA-jjq7-m736-w977

RubyGems/openc3

OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites) 6 days ago

Fix available
Severity - 9.9 (Critical)

GHSA-vp3w-52v9-q57f

RubyGems/openc3

OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting 6 days ago

Fix available
Severity - 8.8 (High)

MAL-2026-16420

RubyGems/kerokwis

Malicious code in kerokwis (RubyGems) 22 Sep

No fix available

MAL-2026-16466

RubyGems/wurl_show_data

Malicious code in wurl_show_data (RubyGems) 22 Sep

No fix available

MAL-2026-16411

RubyGems/no-fun

Malicious code in no-fun (RubyGems) 22 Sep

No fix available

GHSA-4825-p4xm-pcf2

RubyGems/spree_api

Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR) 22 Sep

Fix available
Severity - 7.1 (High)

GHSA-7952-gx68-cjqr

Maven/net.sf.mpxj:mpxj
NuGet/MPXJ.Net
NuGet/net.sf.mpxj
NuGet/net.sf.mpxj-for-csharp
NuGet/net.sf.mpxj-for-vb
... 2 more

MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers 22 Sep

Fix available
Severity - 5.3 (Medium)

GHSA-5vvx-3h34-f3gj

Maven/net.sf.mpxj:mpxj
NuGet/MPXJ.Net
NuGet/net.sf.mpxj
NuGet/net.sf.mpxj-for-csharp
NuGet/net.sf.mpxj-for-vb
... 2 more

MPXJ: XXE Vulnerability in MerlinReader 22 Sep

Fix available
Severity - 7.5 (High)

MAL-2026-17152

RubyGems/mega-clean-box

Malicious code in mega-clean-box (RubyGems) 22 Sep

No fix available

MAL-2026-17151

RubyGems/burndler

Malicious code in burndler (RubyGems) 22 Sep

No fix available

MAL-2026-17149

RubyGems/burmdler

Malicious code in burmdler (RubyGems) 22 Sep

No fix available

MAL-2026-17150

RubyGems/burndlef

Malicious code in burndlef (RubyGems) 22 Sep

No fix available

MAL-2026-17148

RubyGems/buosndler

Malicious code in buosndler (RubyGems) 22 Sep

No fix available

MAL-2026-17147

RubyGems/buonlder

Malicious code in buonlder (RubyGems) 22 Sep

No fix available

MAL-2026-17146

RubyGems/buondler

Malicious code in buondler (RubyGems) 22 Sep

No fix available

MAL-2026-17144

RubyGems/buomdler

Malicious code in buomdler (RubyGems) 22 Sep

No fix available

Vulnerabilities