Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-p5f6-rccc-jv98
  • RubyGems/datadog
 dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS 4 days ago
  • Fix available
  • Severity - 7.5 (High)
GHSA-9h85-g7w3-rh49
  • RubyGems/view_component
 ViewComponent: Reused Component Instances Retain Stale Render Context 4 days ago
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-97jw-64cj-jc58
  • RubyGems/view_component
 ViewComponent: around_render HTML-Safety Bypass 4 days ago
  • Fix available
  • Severity - 8.7 (High)
GHSA-8j3g-f24p-4mpw
  • RubyGems/websocket-driver
 websocket-driver: Memory exhaustion in HTTP header parser 4 days ago
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-33ph-fccm-39pj
  • RubyGems/websocket-driver
 websocket-driver: Resource limit bypass via message compression 4 days ago
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-ghhp-3qvg-889p
  • RubyGems/websocket-driver
 websocket-driver: Memory exhaustion via abuse of protocol length headers 4 days ago
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-2g9c-vf8h-prxx
  • RubyGems/decidim-core
 Decidim: Push subscriptions can be abused for server-side requests 6 days ago
  • Fix available
  • Severity - 6.4 (Medium)
GHSA-533c-2vh9-4r86
  • RubyGems/decidim-core
 Decidim: HTML content blocks allow stored script execution 6 days ago
  • Fix available
  • Severity - 4.8 (Medium)
GHSA-q79h-67vx-m9xg
  • RubyGems/decidim-verifications
 Decidim: CSV census record endpoints improper authorization 6 days ago
  • Fix available
  • Severity - 6.0 (Medium)
GHSA-r3v7-5x4c-c69q
  • RubyGems/decidim
 Decidim: JWT-backed authentication can be replayed across organizations 6 days ago
  • Fix available
  • Severity - 8.5 (High)
GHSA-3mvf-82qp-8qh5
  • RubyGems/decidim-verifications
 Decidim: Verification documents can be downloaded through reusable links 6 days ago
  • Fix available
  • Severity - 7.5 (High)
GHSA-767h-63j4-5226
  • RubyGems/decidim-core
 Decidim: Private exports can be downloaded through reusable links 6 days ago
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-jvqq-cvh4-xm37
  • RubyGems/decidim-admin
 Decidim: Admin user search allows SQL injection through similarity-based sorting 6 days ago
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-86fh-w43w-338c
  • RubyGems/decidim-verifications
 Decidim: Veriļ¬cation admins can access supplied IDs from other organizations 6 days ago
  • Fix available
  • Severity - 4.9 (Medium)
GHSA-vq6j-hj8w-7v39
  • RubyGems/decidim-demographics
 Decidim: Forms admin question editor lacks authorization 6 days ago
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-48rx-c7pg-q66r
  • RubyGems/excon
 Excon does not redact additional sensitive/risky headers when following redirects 10 Jul
  • Fix available
  • Severity - 6.5 (Medium)
Load more...