Security advisories

medium2017-10-24

CVE-2015-7579-rails-html-sanitizer Cross-site Scripting vulnerability

View chart →

rails/rails-html-sanitizer · GHSA-r9c2-cr39-c8g6

medium2017-10-24

CVE-2015-9097-Mail Gem CRLF Injection vulnerability

View chart →

mikel/mail · GHSA-q86f-fmqf-qrf6

critical2017-10-24

CVE-2014-9682-dns-sync command injection vulnerability

View chart →

skoranga/node-dns-sync · GHSA-q5pq-pgrv-fh89

low2017-10-24

CVE-2015-7576-actionpack is vulnerable to remote bypass authentication

View chart →

rails/rails · GHSA-p692-7mm3-3fxg

high2017-10-24

CVE-2013-7086-Webbynode Code Injection vulnerability

View chart →

webbynode/webbynode · GHSA-p65m-qr5x-rrqq

low2017-10-24

CVE-2015-3448-rest-client allows local users to obtain sensitive information by reading the log

View chart →

rest-client/rest-client · GHSA-mx9f-w8qq-q5jf

high2017-10-24

CVE-2014-3482-SQL Injection in Active Record

View chart →

rails/rails · GHSA-mhwp-qhpc-h3jm

medium2017-10-24

CVE-2014-0081-Rails vulnerable to Cross-site Scripting

View chart →

rails/rails · GHSA-m46p-ggm5-5j83

high2017-10-24

CVE-2014-7191-Denial-of-Service Memory Exhaustion in qs

View chart →

visionmedia/node-querystring · GHSA-jjv7-qpx3-h62q

medium2017-10-24

CVE-2015-8859-Root Path Disclosure in send

View chart →

pillarjs/send · GHSA-jgqf-hwc5-hh37

medium2017-10-24

CVE-2015-3227-activesupport vulnerable to Denial of Service via large XML document depth

View chart →

rails/rails · GHSA-j96r-xvjq-r9pg

medium2017-10-24

CVE-2014-0080-Array data injection vulnerability in activerecord

View chart →

rails/rails · GHSA-hqf9-rc9j-5fmj

high2017-10-24

CVE-2015-8854-Regular Expression Denial of Service in marked

View chart →

chjj/marked · GHSA-hjcp-j389-59ff

high2017-10-24

CVE-2014-2322-Arabic Prawn allows remote attackers to execute arbitrary commands via shell metacharacters

View chart →

ozeron/prawn-arabic · GHSA-hgmw-x865-hf9x

medium2017-10-24

CVE-2015-7580-rails-html-sanitizer Cross-site Scripting vulnerability

View chart →

rails/rails-html-sanitizer · GHSA-ghqm-pgxj-37gq

high2017-10-24

CVE-2015-8860-Symlink Arbitrary File Overwrite in tar

View chart →

npm/npm · GHSA-gfjr-3jmm-4g9v

high2017-10-24

CVE-2014-3742-File Descriptor Leak Can Cause DoS Vulnerability in hapi

View chart →

spumko/hapi · GHSA-cqr7-78pj-3g7j

medium2017-10-24

CVE-2015-1370-VBScript Content Injection in marked

View chart →

markedjs/marked · GHSA-cfjh-p3g4-3q2f

medium2017-10-24

CVE-2014-9490-sentry-raven allows remote attackers to cause a denial of service via a large exponent value in a scientific number

View chart →

getsentry/raven-ruby · GHSA-c9c5-9fpr-m882

medium2017-10-24

CVE-2013-6459-will_paginate Cross-site Scripting vulnerability

View chart →

mislav/will_paginate · GHSA-8r6h-7x9g-xmw9