Security advisories

high2017-10-24

CVE-2012-6496-Active Record contains SQL Injection

View chart →

rails/rails · GHSA-gh2w-j7cx-2664

low2017-10-24

CVE-2012-3865-Puppet vulnerable to Path Traversal

View chart →

puppetlabs/puppet · GHSA-g89m-3wjw-h857

medium2017-10-24

CVE-2013-1911-ldoce Gem Arbitrary Command Execution

View chart →

markburns/ldoce · GHSA-g266-3crh-h7gj

critical2017-10-24

CVE-2013-0277-Active Record contains deserialization of arbitrary YAML

View chart →

rails/rails · GHSA-fhj9-cjjh-27vm

medium2017-10-24

CVE-2012-6134-omniauth-oauth2 Cross-Site Request Forgery vulnerability

View chart →

shopify/omniauth-shopify-oauth2 · GHSA-fgmx-8h93-26fh

high2017-10-24

CVE-2013-3567-Puppet Improper Input Validation vulnerability

View chart →

puppetlabs/puppet · GHSA-f7p5-w2cr-7cp7

medium2017-10-24

CVE-2013-4761-Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service

View chart →

puppetlabs/puppet · GHSA-cj43-9h3w-v976

medium2017-10-24

CVE-2013-4562-omniauth-facebook Cross-Site Request Forgery vulnerability

View chart →

mkdynamic/omniauth-faceboo · GHSA-cf36-985g-v73c

medium2017-10-24

CVE-2013-4457-Cocaine Gem OS Command Injection vulnerability

View chart →

thoughtbot/cocaine · GHSA-c43v-hrmg-56r4

medium2017-10-24

CVE-2013-2105-Script Injection in Show In Browser gem

View chart →

jonleung/show_in_browser · GHSA-9hx9-w2j6-rw76

high2017-10-24

CVE-2013-1802-extlib does not properly restrict casts of string values

View chart →

datamapper/extlib · GHSA-9h36-4jf2-hx53

medium2017-10-24

CVE-2013-1856-activesupport Improper Input Validation vulnerability

View chart →

rails/rails · GHSA-9c2j-593q-3g82

critical2017-10-24

CVE-2013-1948-md2pdf allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename

View chart →

rwestgeest/md2pdf · GHSA-99ch-8mvp-g7m5

low2017-10-24

CVE-2012-3866-Puppet allows local users to obtain sensitive configuration information

View chart →

puppetlabs/puppet · GHSA-8jxj-9r5f-w3m2

medium2017-10-24

CVE-2013-0262-Rack Vulnerable to Path Traversal

View chart →

rack/rack · GHSA-85r7-w5mv-c849

medium2017-10-24

CVE-2012-3465-actionpack Cross-site Scripting vulnerability

View chart →

rails/rails · GHSA-7g65-ghrg-hpf5

high2017-10-24

CVE-2013-1898-Thumbshooter vulnerable to Code Injection

View chart →

digineo/thumbshooter · GHSA-7fqj-cg79-f2pv

medium2017-10-24

CVE-2013-1812-Denial of service in ruby-openid

View chart →

openid/ruby-openid · GHSA-6c8p-qphv-668v

high2017-10-24

CVE-2013-1655-Puppet Improper Input Validation vulnerability

View chart →

puppetlabs/puppet · GHSA-574q-fxfj-wv6h

high2017-10-24

CVE-2013-0285-nori contains Improper Input Validation

View chart →

savonrb/nori · GHSA-4936-rj25-6wm6