Homepage
About Snyk

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Expand this section

APPLICATION

Expand this section

OPERATING SYSTEM

Report a new vulnerability
VULNERABILITY AFFECTS TYPE PUBLISHED
  • H
Improper Authentication 		omniauth <1.9.2 >=2.0.0.pre.rc1, <2.0.0 RubyGems 19 Aug 2022
  • H
SQL Injection 		update_by_case <0.1.3 RubyGems 12 Aug 2022
  • H
Directory Traversal 		tzinfo <0.3.61 >=1.0.0, <1.2.10 RubyGems 22 Jul 2022
  • M
Information Exposure 		bolt <3.24.0 RubyGems 20 Jul 2022
  • M
Cross-site Scripting (XSS) 		gollum >=5.0.0, <5.1.2 RubyGems 17 Jul 2022
  • C
Remote Code Execution (RCE) 		activerecord <5.2.8.1 >=6.0.0, <6.0.5.1 >=6.1.0, <6.1.6.1 >=7.0.0, <7.0.3.1 RubyGems 13 Jul 2022
  • M
HTTP Request Smuggling 		llhttp >=0.0.0 RubyGems 10 Jul 2022
  • M
HTTP Request Smuggling 		llhttp >=0.0.0 RubyGems 10 Jul 2022
  • M
HTTP Request Smuggling 		llhttp >=0.0.0 RubyGems 10 Jul 2022
  • H
Deserialization of Untrusted Data 		opensearch-ruby <2.0.2 RubyGems 1 Jul 2022
  • M
Access Restriction Bypass 		ruby-mysql <2.10.0 RubyGems 29 Jun 2022
  • M
Cross-site Scripting (XSS) 		rails-html-sanitizer <1.4.3 RubyGems 26 Jun 2022
  • H
Remote Code Execution (RCE) 		diffy <3.4.1 RubyGems 24 Jun 2022
  • H
Improper Encoding or Escaping of Output 		motor-admin <0.2.61 RubyGems 22 Jun 2022
  • L
Insecure Permissions 		octopoller >=0.2.0, <0.3.0 RubyGems 16 Jun 2022
  • M
Insufficiently Protected Credentials 		mechanize <2.8.5 RubyGems 10 Jun 2022
  • H
Deserialization of Untrusted Data 		jmespath <1.6.1 RubyGems 7 Jun 2022
  • M
Use of Uninitialized Resource 		trilogy <2.1.1 RubyGems 7 Jun 2022
  • M
Cross-site Scripting (XSS) 		publify_core >=8.0, <9.2.5 RubyGems 6 Jun 2022
  • L
Cross-site Request Forgery (CSRF) 		solidus_backend <2.11.16 >=3.0.0, <3.0.6 >=3.1.0, <3.1.6 RubyGems 2 Jun 2022
  • H
Denial of Service (DoS) 		rack >=1.2, <2.0.9.1 >=2.1.0, <2.1.4.1 >=2.2.0, <2.2.3.1 RubyGems 28 May 2022
  • C
Arbitrary Code Injection 		rack <2.0.9.1 >=2.1.0, <2.1.4.1 >=2.2.0, <2.2.3.1 RubyGems 28 May 2022
  • M
Improper Access Control 		publify_core <9.2.9 RubyGems 24 May 2022
  • M
Cross-site Scripting (XSS) 		publify_core <9.2.9 RubyGems 24 May 2022
  • H
Improper Handling of Unexpected Data Type 		nokogiri <1.13.6 RubyGems 20 May 2022
  • H
Inadequate Encryption Strength 		random_password_generator >=0.0.0 RubyGems 18 May 2022
  • M
Cross-site Scripting (XSS) 		publify_core <9.2.8 RubyGems 17 May 2022
  • L
Information Exposure 		publify_core <9.2.8 RubyGems 17 May 2022
  • L
Improper Access Control 		publify_core <9.2.8 RubyGems 17 May 2022
  • M
CSV Injection 		csv-safe <3.0.0 RubyGems 2 May 2022