Skip to content

Product

rubygems em-http-request vulnerabilities

1 published CVE affecting rubygems em-http-request, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest rubygems em-http-request CVEs

Newest publication first

  1. CVE-2020-13482 Improper Certificate Validation in EM-HTTP-Request

    Published
    HighCVSS 7.4 EPSS 0.93% PoC

    EM-HTTP-Request 1.1.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is not verified.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.