Skip to content

Product

debian/ruby-kaminari vulnerabilities

4 published CVES affecting debian/ruby-kaminari, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
4
Critical
0
High
0
Medium
2
Low
0
Unscored
2
CISA KEV
0

Latest debian/ruby-kaminari CVEs

Newest publication first

  1. CVE-2024-32978 Kaminari Insecure File Permissions Vulnerability

    Published
    MediumCVSS 6.6 EPSS 0.60% PoC

    Kaminari is a paginator for web app frameworks and object relational mappings. A security vulnerability involving insecure file permissions has been identified in the Kaminari pagination library for Ruby on Rails, concerning insecure file permissions. This vulnerability is of mod...

  4. CVE-2020-11082 Cross-Site Scripting in Kaminari

    Published
    MediumCVSS 6.1 EPSS 1.5% PoC

    In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.