https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:27:03.393047+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-gitlab-gem-cve-2013-1801 BREW-gitlab-gem-CVE-2013-1801 — HTTParty does not restrict casts of string values 2026-10-06T19:27:03.441116+00:00

Affected: Homebrew: gitlab-gem

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for YAML type conversion, a similar vulnerability to CVE-2013-0156.

 https://cve.radiocsirt.org/vuln/euvd-2026-105621 EUVD-2026-105621 2026-10-06T19:27:03.441174+00:00 EUVD-2026-105621 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1801 fkie_cve-2013-1801 2026-10-06T19:27:03.441190+00:00

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for YAML type conversion, a similar vulnerability to CVE-2013-0156.

 https://cve.radiocsirt.org/vuln/ghsa-mgx3-27hr-mfgp GHSA-mgx3-27hr-mfgp — HTTParty does not restrict casts of string values 2026-10-06T19:27:03.441214+00:00

Affected: RubyGems: httparty

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for YAML type conversion, a similar vulnerability to CVE-2013-0156.

 https://cve.radiocsirt.org/vuln/gsd-2013-1801 gsd-2013-1801 2026-10-06T19:27:03.441235+00:00 gsd-2013-1801