https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:46:22.276686+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2017-0899 Withdrawn: BELL-CVE-2017-0899 — CVE-2017-0899 does not affect BellSoft software 2026-10-03T07:46:22.299730+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 — De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de p… 2026-10-03T07:46:22.299775+00:00 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/cleanstart-2026-vb58893 CLEANSTART-2026-VB58893 — Security fix for CVE-2017-0899 applied in: ruby 2.4.2-r0 2026-10-03T07:46:22.299794+00:00

Affected: CleanStart: ruby

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2017-30738 cnvd-2017-30738 2026-10-03T07:46:22.299823+00:00 cnvd-2017-30738 https://cve.radiocsirt.org/vuln/euvd-2026-181722 EUVD-2026-181722 2026-10-03T07:46:22.299837+00:00 EUVD-2026-181722 https://cve.radiocsirt.org/vuln/fkie_cve-2017-0899 fkie_cve-2017-0899 2026-10-03T07:46:22.299847+00:00

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.

 https://cve.radiocsirt.org/vuln/ghsa-7gcp-2gmq-w3xh GHSA-7gcp-2gmq-w3xh — RubyGems Code Injection vulnerability 2026-10-03T07:46:22.299868+00:00

Affected: RubyGems: rubygems-update

RubyGems prior to 2.6.13 is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.

 https://cve.radiocsirt.org/vuln/gsd-2017-0899 gsd-2017-0899 2026-10-03T07:46:22.299886+00:00 gsd-2017-0899 https://cve.radiocsirt.org/vuln/rhsa-2017:3485 RHSA-2017:3485 — Red Hat Security Advisory: rh-ruby24-ruby security, bug fix, and enhancement update 2026-10-03T07:46:22.299897+00:00

ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the "summary" field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Arbitrary heap exposure during a JSON.generate call

 https://cve.radiocsirt.org/vuln/rhsa-2018:0378 RHSA-2018:0378 — Red Hat Security Advisory: ruby security update 2026-10-03T07:46:22.299929+00:00

ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the "summary" field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Buffer underrun in OpenSSL ASN1 decode ruby: Arbitrary heap exposure during a JSON.generate call ruby: Command injection vulnerability in Net::FTP ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution

 https://cve.radiocsirt.org/vuln/suse-su-2020:1570-1 SUSE-SU-2020:1570-1 — Security update for ruby2.1 2026-10-03T07:46:22.299961+00:00

Security update for ruby2.1

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-0899 UBUNTU-CVE-2017-0899 2026-10-03T07:46:22.299990+00:00

Affected: Ubuntu:14.04:LTS: ruby1.9.1, Ubuntu:Pro:14.04:LTS: jruby, Ubuntu:16.04:LTS: ruby2.3, Ubuntu:16.04:LTS: jruby, Ubuntu:18.04:LTS: jruby, Ubuntu:20.04:LTS: jruby, Ubuntu:24.04:LTS: jruby, Ubuntu:25.10: jruby, Ubuntu:26.04:LTS: jruby

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1421 WID-SEC-W-2026-1421 — Ruby: Mehrere Schwachstellen 2026-10-03T07:46:22.300018+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby ausnutzen, um falsche Informationen darzustellen, Systemdateien zu manipulieren oder beliebigen Programmcode zur Ausführung bringen.