Integer Underflow @ ossl_cipher_pkcs5_keyivgen #304115 Informative Memory Corruption – 2018-02-23 – – Invalid URL parsing '#' #341634 Informative No weakness recorded – 2018-05-01 – – SEGV in parse_rat() #363934 Informative Denial of Service – 2018-06-13 – – Heap corruption in DateTime.strftime() on 32 bit for certain format strings #144484 Informative Memory Corruption – 2016-06-21 – 1 DRb denial of service vulnerability #898614 Informative Denial of Service – 2021-03-07 – 1 Heap corruption in string.c tr_trans() due to undersized buffer #144485 Informative Memory Corruption – 2016-06-21 – 2 Net::SMTP with tls allows forged certificates as long as the hostname matches #980249 Informative Cryptography – 2021-01-25 – 3 XMLRPC does not limit deserializable classes. #1189419 Informative Deserialization and Object Injection – 2023-08-01 – 3 Bug Report : [ No Valid SPF Records ] #1301696 Informative No weakness recorded – 2022-01-13 – 3 Ruby 2.4.1 has "Stack consistency error" and aborts when processing return statement within a case statement #247640 Informative Memory Corruption – 2017-09-24 – 4 OS Command Injection in '/lib/un.rb -- Utilities to replace common UNIX commands in Makefiles etc' #1158824 Informative Command and Code Injection – 2021-07-19 – 4 Stored XSS in RDoc hyperlinks through javascript scheme #1977258 Informative Cross-site Scripting – 2023-07-18 – 4 Ruby:HTTP Header injection in 'net/http' #146416 Informative Open Redirect – 2017-02-27 – 5 Resolv::getaddresses bug that can be abused to bypass security measures. #287835 Informative Misconfiguration and Insecure Design – 2018-02-23 – 5 XSS exploit of RDoc documentation generated by rdoc #1321358 Informative Cross-site Scripting – 2023-07-18 – 5 Header CRLF Injection in Ruby Net::HTTP #1718757 Informative Injection and Smuggling – 2023-05-04 – 5 Attacker can smuggle a malicious domain in a URI object. #156615 Informative Open Redirect – 2022-12-13 – 8 'net/ftp': Uncontrolled Resource Consumption (Memory/CPU) #1165748 Informative Denial of Service – 2021-04-21 – 8 'net/http': HTTP Header Injection in the set_content_type method #1168205 Informative Injection and Smuggling – 2022-02-04 – 9 DoS in bigdecimal's sqrt function due to miscalculation of loop iterations #2271054 Informative Denial of Service – 2023-12-20 – 14 XSS exploit of RDoc documentation generated by rdoc (CVE-2013-0256) #1977168 Informative Cross-site Scripting – 2023-07-18 – 16 The taint flag is not propagated at JSON.parse #459084 Informative No weakness recorded – 2024-01-05 – 40