Ruby · disclosed reports
Memory Corruption
11 disclosed reports · $0 paid
Out of date: the sync last ran 4 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
Open Ruby on HackerOne- reports
- 11
- paid a bounty
- 0
Every one of the 11 is a mark on the map. Named now: 1 to 11, most upvoted first.
- sprintf combined format string attack
- StringIO strio_getline() can divulge arbitrary memory
- controlled buffer under-read in pack_unpack_internal()
- Arbitrary heap exposure in JSON.generate
- Buffer underflow in sprintf
- Ruby 2.4.1 has "Stack consistency error" and aborts when processing return statement within a case statement
- Parsing invalid unicode codepoints using json c extension (2.0.1+) triggers a segfault
- Ruby 2.3.x and 2.2.x still bundle DoS vulnerable verision of libYAML
- Heap corruption in string.c tr_trans() due to undersized buffer
- Heap corruption in DateTime.strftime() on 32 bit for certain format strings
- Integer Underflow @ ossl_cipher_pkcs5_keyivgen
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.