Vulnerability Database

RHSA-2026:72285

Red Hat:enterprise_linux:8::appstream/ruby
Red Hat:enterprise_linux:8::appstream/ruby-bundled-gems
Red Hat:enterprise_linux:8::appstream/ruby-bundled-gems-debuginfo
Red Hat:enterprise_linux:8::appstream/ruby-debuginfo
Red Hat:enterprise_linux:8::appstream/ruby-debugsource
... 39 more

Red Hat Security Advisory: ruby:3.3 security update 17 hours ago

Fix available
Severity - 7.5 (High)

RHSA-2026:72286

Red Hat:enterprise_linux:9::appstream/ruby
Red Hat:enterprise_linux:9::appstream/ruby-debuginfo
Red Hat:enterprise_linux:9::appstream/ruby-debugsource
Red Hat:enterprise_linux:9::appstream/ruby-default-gems
Red Hat:enterprise_linux:9::appstream/ruby-devel
... 24 more

Red Hat Security Advisory: ruby security, bug fix, and enhancement update 17 hours ago

Fix available
Severity - 7.5 (High)

ALSA-2026:72286

AlmaLinux:9/ruby
AlmaLinux:9/ruby-default-gems
AlmaLinux:9/ruby-devel
AlmaLinux:9/ruby-doc
AlmaLinux:9/ruby-libs
... 17 more

Important: ruby security, bug fix, and enhancement update yesterday

Fix available

ALSA-2026:72484

AlmaLinux:9/ruby
AlmaLinux:9/ruby-bundled-gems
AlmaLinux:9/ruby-default-gems
AlmaLinux:9/ruby-devel
AlmaLinux:9/ruby-doc
... 23 more

Important: ruby:4.0 security update yesterday

Fix available

ALSA-2026:72485

AlmaLinux:9/ruby
AlmaLinux:9/ruby-bundled-gems
AlmaLinux:9/ruby-default-gems
AlmaLinux:9/ruby-devel
AlmaLinux:9/ruby-doc
... 23 more

Important: ruby:3.3 security update yesterday

Fix available

GHSA-jjq7-m736-w977

RubyGems/openc3

OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites) 5 days ago

Fix available
Severity - 9.9 (Critical)

GHSA-vp3w-52v9-q57f

RubyGems/openc3

OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting 5 days ago

Fix available
Severity - 8.8 (High)

MAL-2026-16420

RubyGems/kerokwis

Malicious code in kerokwis (RubyGems) 6 days ago

No fix available

MAL-2026-16466

RubyGems/wurl_show_data

Malicious code in wurl_show_data (RubyGems) 6 days ago

No fix available

MAL-2026-16411

RubyGems/no-fun

Malicious code in no-fun (RubyGems) 6 days ago

No fix available

GHSA-4825-p4xm-pcf2

RubyGems/spree_api

Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR) 6 days ago

Fix available
Severity - 7.1 (High)

GHSA-7952-gx68-cjqr

Maven/net.sf.mpxj:mpxj
NuGet/MPXJ.Net
NuGet/net.sf.mpxj
NuGet/net.sf.mpxj-for-csharp
NuGet/net.sf.mpxj-for-vb
... 2 more

MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers 6 days ago

Fix available
Severity - 5.3 (Medium)

GHSA-5vvx-3h34-f3gj

Maven/net.sf.mpxj:mpxj
NuGet/MPXJ.Net
NuGet/net.sf.mpxj
NuGet/net.sf.mpxj-for-csharp
NuGet/net.sf.mpxj-for-vb
... 2 more

MPXJ: XXE Vulnerability in MerlinReader 6 days ago

Fix available
Severity - 7.5 (High)

MAL-2026-17152

RubyGems/mega-clean-box

Malicious code in mega-clean-box (RubyGems) 6 days ago

No fix available

MAL-2026-17151

RubyGems/burndler

Malicious code in burndler (RubyGems) 6 days ago

No fix available

MAL-2026-17149

RubyGems/burmdler

Malicious code in burmdler (RubyGems) 6 days ago

No fix available

Vulnerabilities