Security advisories

medium2017-10-24

CVE-2016-7103-jQuery-UI vulnerable to Cross-site Scripting in dialog closeText

View chart →

jquery/jquery-ui · GHSA-hpcf-8vf9-q4gj

high2017-10-24

CVE-2016-10173-archive-tar-minitar and minitar vulnerable to Path Traversal

View chart →

halostatue/minitar · GHSA-h5g2-38x9-4gv3

high2017-10-24

CVE-2016-1202-High severity vulnerability that affects electron

View chart →

electron/electron · GHSA-gvcj-pfq2-wxj7

critical2017-10-24

CVE-2017-5946-Directory traversal vulnerability in RubyZip

View chart →

rubyzip/rubyzip · GHSA-gcqq-w6gr-h9j9

high2017-10-24

CVE-2016-0751-actionpack is vulnerable to denial of service via a crafted HTTP Accept header

View chart →

rails/rails · GHSA-ffpv-c4hm-3x6v

critical2017-10-24

CVE-2016-10194-festivaltts4r allows arbitrary command execution

View chart →

spejman/festivaltts4r · GHSA-f7f4-5w9j-23p2

high2017-10-24

CVE-2016-2537-Regular Expression Denial of Service in is-my-json-valid

View chart →

mafintosh/is-my-json-valid · GHSA-f522-ffg8-j8r6

high2017-10-24

CVE-2016-3693-safemode gem allows context-dependent attackers to obtain sensitive information via the inspect method

View chart →

svenfuchs/safemode · GHSA-c92m-rrrc-q5wf

medium2017-10-24

CVE-2016-4055-Regular Expression Denial of Service in moment

View chart →

moment/moment · GHSA-87vv-r9j6-g5qv

high2017-10-24

CVE-2016-2098-actionpack allows remote code execution via application's unrestricted use of render method

View chart →

rails/rails · GHSA-78rc-8c29-p45g

high2017-10-24

CVE-2016-7798-OpenSSL gem for Ruby using inadequate encryption strength

View chart →

ruby/openssl · GHSA-6h88-qjpv-p32m

critical2017-10-24

CVE-2017-7540-Safemode Gem Has Incomplete List of Disallowed Inputs

View chart →

svenfuchs/safemode · GHSA-5vx5-9q73-wgp4

medium2017-10-24

CVE-2016-0753-activemodel contains Improper Input Validation

View chart →

rails/rails · GHSA-543v-gj2c-r3ch

critical2017-10-24

CVE-2016-10193-espeak-ruby allows arbitrary command execution

View chart →

dejan/espeak-ruby · GHSA-4jm3-pfpf-h54p

critical2017-10-24

CVE-2016-6582-Doorkeeper is vulnerable to replay attacks

View chart →

doorkeeper-gem/doorkeeper · GHSA-3m6r-39p3-jq25