https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:09:40 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/cnvd-2017-30057 cnvd-2017-30057 https://cve.radiocsirt.org/vuln/cnvd-2017-30057 https://cve.radiocsirt.org/vuln/euvd-2026-184778 EUVD-2026-184778 https://cve.radiocsirt.org/vuln/euvd-2026-184778 https://cve.radiocsirt.org/vuln/fkie_cve-2017-0903 <p>RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution.</p> <p>RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-0903 https://cve.radiocsirt.org/vuln/ghsa-mqwr-4qf2-2hcv <p><strong>Affected:</strong> RubyGems: rubygems-update</p> <p>RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution. The issue has been patched in 2.6.14.</p> <p><strong>Affected:</strong> RubyGems: rubygems-update</p> <p>RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution. The issue has been patched in 2.6.14.</p> https://cve.radiocsirt.org/vuln/ghsa-mqwr-4qf2-2hcv https://cve.radiocsirt.org/vuln/gsd-2017-0903 gsd-2017-0903 https://cve.radiocsirt.org/vuln/gsd-2017-0903 https://cve.radiocsirt.org/vuln/rhsa-2017:3485 <p>ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the &#34;summary&#34; field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Arbitrary heap exposure during a JSON.generate call</p> <p>ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the &#34;summary&#34; field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Arbitrary heap exposure during a JSON.generate call</p> https://cve.radiocsirt.org/vuln/rhsa-2017:3485 https://cve.radiocsirt.org/vuln/rhsa-2018:0378 <p>ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the &#34;summary&#34; field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Buffer underrun in OpenSSL ASN1 decode ruby: Arbitrary heap exposure during a JSON.generate call ruby: Command injection vulnerability in Net::FTP ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution</p> <p>ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the &#34;summary&#34; field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Buffer underrun in OpenSSL ASN1 decode ruby: Arbitrary heap exposure during a JSON.generate call ruby: Command injection vulnerability in Net::FTP ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution</p> https://cve.radiocsirt.org/vuln/rhsa-2018:0378 https://cve.radiocsirt.org/vuln/suse-su-2020:1570-1 <p>Security update for ruby2.1</p> <p>Security update for ruby2.1</p> https://cve.radiocsirt.org/vuln/suse-su-2020:1570-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-0903 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ruby2.0, Ubuntu:Pro:14.04:LTS: jruby, Ubuntu:16.04:LTS: ruby2.3, Ubuntu:16.04:LTS: jruby</p> <p>RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ruby2.0, Ubuntu:Pro:14.04:LTS: jruby, Ubuntu:16.04:LTS: ruby2.3, Ubuntu:16.04:LTS: jruby</p> <p>RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-0903