Security advisories

high2017-10-24

CVE-2016-2098-actionpack allows remote code execution via application's unrestricted use of render method

rails/rails · GHSA-78rc-8c29-p45g

high2017-10-24

CVE-2016-7798-OpenSSL gem for Ruby using inadequate encryption strength

ruby/openssl · GHSA-6h88-qjpv-p32m

critical2017-10-24

CVE-2017-7540-Safemode Gem Has Incomplete List of Disallowed Inputs

svenfuchs/safemode · GHSA-5vx5-9q73-wgp4

medium2017-10-24

CVE-2016-0753-activemodel contains Improper Input Validation

rails/rails · GHSA-543v-gj2c-r3ch

critical2017-10-24

CVE-2016-10193-espeak-ruby allows arbitrary command execution

dejan/espeak-ruby · GHSA-4jm3-pfpf-h54p

critical2017-10-24

CVE-2016-6582-Doorkeeper is vulnerable to replay attacks

doorkeeper-gem/doorkeeper · GHSA-3m6r-39p3-jq25