Ruby · weakness class
Denial of Service
15 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.
- Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
- Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
- REXML contains a denial of service vulnerability
- Denial of service in REXML
- REXML ReDoS vulnerability
- REXML DoS vulnerability
- REXML denial of service vulnerability
- REXML DoS vulnerability
- The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An…
- Net::IMAP vulnerable to possible DoS by memory exhaustion
- net-imap rubygem vulnerable to possible DoS by memory exhaustion
- net-imap: Quadratic complexity when reading response literals
- An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create…
- net-imap: Denial of service via high iteration count for `SCRAM-*` authentication
- REXML has a DoS condition when parsing malformed XML file
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.