https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:56:55.600224+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-0903 CVE-2017-0903 2026-10-04T15:56:55.636222+00:00

Affected: HackerOne RubyGems

RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-mqwr-4qf2-2hcv GHSA-mqwr-4qf2-2hcv — RubyGems vulnerable to Deserialization of Untrusted Data 2026-10-04T15:56:55.636275+00:00

Affected: RubyGems: rubygems-update

RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution. The issue has been patched in 2.6.14.