https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:31:25.056458+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-04096 cnvd-2015-04096 2026-10-03T08:31:25.064171+00:00 cnvd-2015-04096 https://cve.radiocsirt.org/vuln/euvd-2026-92202 EUVD-2026-92202 2026-10-03T08:31:25.064205+00:00 EUVD-2026-92202 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3900 fkie_cve-2015-3900 2026-10-03T08:31:25.064219+00:00

RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a "DNS hijack attack."

 https://cve.radiocsirt.org/vuln/ghsa-wp3j-rvfp-624h GHSA-wp3j-rvfp-624h — RubyGems vulnerable to DNS hijack attack 2026-10-03T08:31:25.064248+00:00

Affected: RubyGems: rubygems-update

RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a "DNS hijack attack."

 https://cve.radiocsirt.org/vuln/gsd-2015-3900 gsd-2015-3900 2026-10-03T08:31:25.064273+00:00 gsd-2015-3900 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10090-1 openSUSE-SU-2024:10090-1 — libruby2_3-2_3-2.3.1-1.6 on GA media 2026-10-03T08:31:25.064285+00:00

libruby2_3-2_3-2.3.1-1.6 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2015:1657 RHSA-2015:1657 — Red Hat Security Advisory: rh-ruby22-ruby security update 2026-10-03T08:31:25.064301+00:00

rubygems: DNS hijacking vulnerability in api_endpoint()

 https://cve.radiocsirt.org/vuln/suse-su-2017:1067-1 SUSE-SU-2017:1067-1 — Security update for ruby2.1 2026-10-03T08:31:25.064315+00:00

Security update for ruby2.1