Ruby:HTTP Header injection in 'net/http' #146416 Informative Open Redirect – 2017-02-27 – 5 Stored XSS in RDoc hyperlinks through javascript scheme #1977258 Informative Cross-site Scripting – 2023-07-18 – 4 OS Command Injection in '/lib/un.rb -- Utilities to replace common UNIX commands in Makefiles etc' #1158824 Informative Command and Code Injection – 2021-07-19 – 4 Source code disclosed via S3 Bucket #778931 N/A Information Disclosure – 2020-02-13 – 4 Ruby 2.4.1 has "Stack consistency error" and aborts when processing return statement within a case statement #247640 Informative Memory Corruption – 2017-09-24 – 4 Parsing invalid unicode codepoints using json c extension (2.0.1+) triggers a segfault #198927 Valid Memory Corruption – 2017-10-25 – 4 Response splitting vulnerability in WEBrick #153794 Valid Cross-site Scripting – 2018-04-29 – 4 Bug Report : [ No Valid SPF Records ] #1301696 Informative No weakness recorded – 2022-01-13 – 3 XMLRPC does not limit deserializable classes. #1189419 Informative Deserialization and Object Injection – 2023-08-01 – 3 Net::SMTP with tls allows forged certificates as long as the hostname matches #980249 Informative Cryptography – 2021-01-25 – 3 Null character at fnmatch #449617 Valid No weakness recorded – 2019-10-16 – 3 Ruby 2.3.x and 2.2.x still bundle DoS vulnerable verision of libYAML #235842 Valid Memory Corruption – 2017-10-25 – 3 Heap corruption in string.c tr_trans() due to undersized buffer #144485 Informative Memory Corruption – 2016-06-21 – 2 Command injection in OptionParser.load #1090678 N/A Command and Code Injection – 2021-03-07 – 1 DRb denial of service vulnerability #898614 Informative Denial of Service – 2021-03-07 – 1 HTTP header can split /[\r\n]/ instead of /\r\n/ #331984 Valid No weakness recorded – 2019-10-25 – 1 Potential command injection in `Shell#[]` and `Shell#test` #327512 Valid Command and Code Injection – 2019-10-16 – 1 Provide a security sistem most fit to our team #281850 N/A No weakness recorded – 2017-12-15 – 1 Open aws s3 bucket s3://rubyci #257276 N/A Information Disclosure – 2017-08-06 – 1 Heap corruption in DateTime.strftime() on 32 bit for certain format strings #144484 Informative Memory Corruption – 2016-06-21 – 1 SEGV in parse_rat() #363934 Informative Denial of Service – 2018-06-13 – – Invalid URL parsing '#' #341634 Informative No weakness recorded – 2018-05-01 – – Integer Underflow @ ossl_cipher_pkcs5_keyivgen #304115 Informative Memory Corruption – 2018-02-23 – –