Skip to content

Product

rubygems better_errors vulnerabilities

1 published CVE affecting rubygems better_errors, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest rubygems better_errors CVEs

Newest publication first

  1. CVE-2021-39197 Cross-Site Request Forgery in better_errors

    Published
    HighCVSS 8.8 EPSS 0.64% PoC

    better_errors is an open source replacement for the standard Rails error page with more information rich error pages. It is also usable outside of Rails in any Rack app as Rack middleware. better_errors prior to 2.8.0 did not implement CSRF protection for its internal requests. I...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.