Skip to content

Product

debian/ruby-extlib vulnerabilities

1 published CVE affecting debian/ruby-extlib, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest debian/ruby-extlib CVEs

Newest publication first

  1. CVE-2013-1802 extlib does not properly restrict casts of string values

    Published
    HighCVSS 7.5 PoC

    The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack sup...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.