https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:04:31.075812+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-04231 bdu:2019-04231 2026-10-03T03:04:31.184128+00:00 bdu:2019-04231 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 — De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de p… 2026-10-03T03:04:31.184174+00:00 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/cnvd-2018-07055 cnvd-2018-07055 2026-10-03T03:04:31.184193+00:00 cnvd-2018-07055 https://cve.radiocsirt.org/vuln/euvd-2026-71069 EUVD-2026-71069 2026-10-03T03:04:31.184206+00:00 EUVD-2026-71069 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000079 fkie_cve-2018-1000079 2026-10-03T03:04:31.184217+00:00

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in gem installation that can result in the gem could write to arbitrary filesystem locations during installation. This attack appear to be exploitable via the victim must install a malicious gem. This vulnerability appears to have been fixed in 2.7.6.

 https://cve.radiocsirt.org/vuln/ghsa-8qxg-mff5-j3wc GHSA-8qxg-mff5-j3wc — RubyGems Path Traversal vulnerability 2026-10-03T03:04:31.184246+00:00

Affected: RubyGems: rubygems-update, Maven: org.jruby:jruby-stdlib

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in gem installation that can result in the gem writing to arbitrary filesystem locations during installation. This attack appears to be exploitable via installation of a malicious gem. This vulnerability is fixed in 2.7.6.

 https://cve.radiocsirt.org/vuln/gsd-2018-1000079 gsd-2018-1000079 2026-10-03T03:04:31.184273+00:00 gsd-2018-1000079 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1771-1 openSUSE-SU-2019:1771-1 — Security update for ruby-bundled-gems-rpmhelper, ruby2.5 2026-10-03T03:04:31.184285+00:00

Security update for ruby-bundled-gems-rpmhelper, ruby2.5

 https://cve.radiocsirt.org/vuln/rhsa-2018:3729 RHSA-2018:3729 — Red Hat Security Advisory: rh-ruby23-ruby security, bug fix, and enhancement update 2026-10-03T03:04:31.184313+00:00

ruby: HTTP response splitting in WEBrick ruby: Unintentional file and directory creation with directory traversal in tempfile and tmpdir ruby: DoS by large request in WEBrick ruby: Buffer under-read in String#unpack ruby: Unintentional socket creation by poisoned NULL byte in UNIXServer and UNIXSocket ruby: Unintentional directory traversal by poisoned NULL byte in Dir ruby: OpenSSL::X509:: Name equality check does not work correctly ruby: Tainted flags are not propagated in Array#pack and String#unpack with some directives rubygems: Path traversal when writing to a symlinked basedir outside of the root rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML rubygems: Infinite loop vulnerability due to negative size in tar header causes Denial of Service rubygems: Improper verification of signatures in tarball allows to install mis-signed gem rubygems: Missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL rubygems: XSS vulnerability in homepage attribute when displayed via gem server rubygems: Path traversal issue during gem installation allows to write to arbitrary filesystem locations

 https://cve.radiocsirt.org/vuln/suse-su-2019:1804-1 SUSE-SU-2019:1804-1 — Security update for ruby-bundled-gems-rpmhelper, ruby2.5 2026-10-03T03:04:31.184356+00:00

Security update for ruby-bundled-gems-rpmhelper, ruby2.5

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000079 UBUNTU-CVE-2018-1000079 2026-10-03T03:04:31.184383+00:00

Affected: Ubuntu:14.04:LTS: ruby2.0, Ubuntu:Pro:14.04:LTS: jruby, Ubuntu:16.04:LTS: ruby2.3, Ubuntu:16.04:LTS: jruby, Ubuntu:18.04:LTS: jruby

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in gem installation that can result in the gem could write to arbitrary filesystem locations during installation. This attack appear to be exploitable via the victim must install a malicious gem. This vulnerability appears to have been fixed in 2.7.6.