Skip to content

Product

rubygems git vulnerabilities

3 published CVES affecting rubygems git, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
1
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest rubygems git CVEs

Newest publication first

  1. CVE-2022-46648 ruby-git has potential remote code execution vulnerability

    Published
    HighCVSS 8.0 EPSS 1.4% PoC

    ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.

  2. CVE-2022-47318 Code injection in ruby git

    Published
    HighCVSS 8.0 EPSS 1.4%

    ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.

  3. CVE-2022-25648 Command Injection

    Published
    CriticalCVSS 9.8 EPSS 4.6% PoC

    The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetch(remote = 'origin', opts = {}) function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.