https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 04:01:12 +0000 https://cve.radiocsirt.org/vuln/cve-2017-0903 <p><strong>Affected:</strong> HackerOne RubyGems</p> <p>RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution.</p> <p><strong>Affected:</strong> HackerOne RubyGems</p> <p>RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution.</p> https://cve.radiocsirt.org/vuln/cve-2017-0903 https://cve.radiocsirt.org/vuln/ghsa-mqwr-4qf2-2hcv <p><strong>Affected:</strong> RubyGems: rubygems-update</p> <p>RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution. The issue has been patched in 2.6.14.</p> <p><strong>Affected:</strong> RubyGems: rubygems-update</p> <p>RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution. The issue has been patched in 2.6.14.</p> https://cve.radiocsirt.org/vuln/ghsa-mqwr-4qf2-2hcv