https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:08:20.375806+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-27834 cnvd-2017-27834 2026-10-02T20:08:20.389383+00:00 cnvd-2017-27834 https://cve.radiocsirt.org/vuln/euvd-2026-86829 EUVD-2026-86829 2026-10-02T20:08:20.389433+00:00 EUVD-2026-86829 https://cve.radiocsirt.org/vuln/fkie_cve-2016-7798 fkie_cve-2016-7798 2026-10-02T20:08:20.389448+00:00

The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism.

 https://cve.radiocsirt.org/vuln/ghsa-6h88-qjpv-p32m GHSA-6h88-qjpv-p32m — OpenSSL gem for Ruby using inadequate encryption strength 2026-10-02T20:08:20.389496+00:00

Affected: RubyGems: openssl

The OpenSSL gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism.

 https://cve.radiocsirt.org/vuln/gsd-2016-7798 gsd-2016-7798 2026-10-02T20:08:20.389521+00:00 gsd-2016-7798 https://cve.radiocsirt.org/vuln/msrc_cve-2016-7798 msrc_CVE-2016-7798 — The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the… 2026-10-02T20:08:20.389533+00:00 msrc_CVE-2016-7798 https://cve.radiocsirt.org/vuln/suse-su-2020:1570-1 SUSE-SU-2020:1570-1 — Security update for ruby2.1 2026-10-02T20:08:20.389566+00:00

Security update for ruby2.1

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-7798 UBUNTU-CVE-2016-7798 2026-10-02T20:08:20.389602+00:00

Affected: Ubuntu:14.04:LTS: ruby1.9.1, Ubuntu:14.04:LTS: ruby2.0, Ubuntu:16.04:LTS: ruby2.3, Ubuntu:16.04:LTS: ruby-attr-encrypted, Ubuntu:16.04:LTS: ruby-encryptor

The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism.