Security Advisories | GitStock

high2017-10-24

CVE-2016-0751-actionpack is vulnerable to denial of service via a crafted HTTP Accept header

rails/rails · GHSA-ffpv-c4hm-3x6v

critical2017-10-24

CVE-2016-10194-festivaltts4r allows arbitrary command execution

spejman/festivaltts4r · GHSA-f7f4-5w9j-23p2

high2017-10-24

CVE-2016-2537-Regular Expression Denial of Service in is-my-json-valid

mafintosh/is-my-json-valid · GHSA-f522-ffg8-j8r6

high2017-10-24

CVE-2016-3693-safemode gem allows context-dependent attackers to obtain sensitive information via the inspect method

svenfuchs/safemode · GHSA-c92m-rrrc-q5wf

medium2017-10-24

CVE-2016-4055-Regular Expression Denial of Service in moment

moment/moment · GHSA-87vv-r9j6-g5qv

high2017-10-24

CVE-2016-2098-actionpack allows remote code execution via application's unrestricted use of render method

rails/rails · GHSA-78rc-8c29-p45g

high2017-10-24

CVE-2016-7798-OpenSSL gem for Ruby using inadequate encryption strength

ruby/openssl · GHSA-6h88-qjpv-p32m

critical2017-10-24

CVE-2017-7540-Safemode Gem Has Incomplete List of Disallowed Inputs

svenfuchs/safemode · GHSA-5vx5-9q73-wgp4

medium2017-10-24

CVE-2016-0753-activemodel contains Improper Input Validation

rails/rails · GHSA-543v-gj2c-r3ch

critical2017-10-24

CVE-2016-10193-espeak-ruby allows arbitrary command execution

dejan/espeak-ruby · GHSA-4jm3-pfpf-h54p

critical2017-10-24

CVE-2016-6582-Doorkeeper is vulnerable to replay attacks

doorkeeper-gem/doorkeeper · GHSA-3m6r-39p3-jq25