Skip to content

Product

org.jruby/jruby-stdlib vulnerabilities

7 published CVES affecting org.jruby/jruby-stdlib, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
7
Critical
1
High
3
Medium
3
Low
0
Unscored
0
CISA KEV
0

Latest org.jruby/jruby-stdlib CVEs

Newest publication first

  1. CVE-2018-1000074 RubyGems Deserialization of Untrusted Data vulnerability

    Published
    HighCVSS 7.8 EPSS 2.9%

    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Deserialization of Untrusted Data vulnerability in owner command that can resu...

  2. CVE-2018-1000078 RubyGems Cross-site Scripting vulnerability

    Published
    MediumCVSS 6.1 EPSS 2.7%

    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Cross Site Scripting (XSS) vulnerability in gem server display of homepage att...

  3. CVE-2018-1000077 RubyGems Improper Input Validation vulnerability

    Published
    MediumCVSS 5.3 EPSS 3.6%

    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Input Validation vulnerability in ruby gems specification homepage at...

  4. CVE-2018-1000079 RubyGems Path Traversal vulnerability

    Published
    MediumCVSS 5.5 EPSS 2.8%

    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in gem installation that can result in the g...

  5. CVE-2018-1000075 RubyGems Infinite Loop vulnerability

    Published
    HighCVSS 7.5 EPSS 4.7%

    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a infinite loop caused by negative size vulnerability in ruby gem package tar he...

  6. CVE-2018-1000073 RubyGems Link Following vulnerability

    Published
    HighCVSS 7.5 EPSS 4.9% PoC

    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in install_location function of package.rb t...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.