HackerOne / RubyGems

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2017-0903	rubygems: Unsafe object deserialization through YAML formatted gem specifications	CRITICAL	9.8	Oct 11, 2017
CVE-2017-0902	rubygems: DNS hijacking vulnerability	HIGH	8.1	Aug 31, 2017
CVE-2017-0901	rubygems: Arbitrary file overwrite due to incorrect validation of specification name	HIGH	7.5	Aug 31, 2017
CVE-2017-0899	rubygems: Escape sequence in the "summary" field of gemspec	CRITICAL	9.8	Aug 31, 2017

Rows per page

Showing 1 to 4 of 4 CVEs