RU
Vendor
ruby
29
CVEs
0
On KEV
0
New 30D
Products
NE9.8
net-imap
ruby
10 CVEs0 on KEV0 new
RE7.5
rexml
ruby
7 CVEs0 on KEV0 new
JS9.1
json
ruby
4 CVEs0 on KEV0 new
RE7.5
resolv
Ruby
3 CVEs0 on KEV0 new
ER8.1
erb
ruby
1 CVEs0 on KEV0 new
RD4.5
Rdoc
Ruby
1 CVEs0 on KEV0 new
UR7.5
uri
ruby
1 CVEs0 on KEV0 new
WE5.9
WEBrick
Ruby
1 CVEs0 on KEV0 new
ZL9.8
zlib
ruby
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-80213 | RE resolv Ruby | 4.0 | Aug 27 | An issue was discovered in the resolv gem before 0.7.2 for Ruby |
| CVE-2026-80212 | RE resolv Ruby | 7.5 | Aug 27 | An issue was discovered in the resolv gem before 0.7.2 for Ruby |
| CVE-2026-71847 | JS json ruby | 8.7 | Aug 7 | Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams |
| CVE-2026-54696 | JS json ruby | 3.7 | Jun 30 | Ruby JSON: JSON generator heap buffer overflow when streaming to an IO |
| CVE-2026-47242 | NE net-imap ruby | 5.8 | Jun 22 | Net::IMAP: Command Injection via ID command argument |
| CVE-2026-47240 | NE net-imap ruby | 5.8 | Jun 22 | Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument |
| CVE-2026-47241 | NE net-imap ruby | 2.1 | Jun 22 | Net::IMAP: Denial of Service via incomplete raw argument validation |
| CVE-2026-42258 | NE net-imap ruby | 5.3 | May 9 | net-imap: Command Injection via unvalidated Symbol inputs |
| CVE-2026-42257 | NE net-imap ruby | 9.8 | May 9 | net-imap: Command Injection via "raw" arguments to multiple commands |
| CVE-2026-42256 | NE net-imap ruby | 6.5 | May 9 | net-imap: Denial of service via high iteration count for `SCRAM-*` authentication |
| CVE-2026-42245 | NE net-imap ruby | 7.5 | May 9 | net-imap: Quadratic complexity when reading response literals |
| CVE-2026-42246 | NE net-imap ruby | 7.4 | May 9 | net-imap vulnerable to STARTTLS stripping via invalid response timing |
| CVE-2026-41316 | ER erb ruby | 8.1 | Apr 24 | ERB has an @_init deserialization guard bypass via def_module / def_method / def_class |
| CVE-2026-27820 | ZL zlib ruby | 9.8 | Apr 16 | zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption |
| CVE-2026-33210 | JS json ruby | 9.1 | Mar 20 | Ruby JSON has a format string injection vulnerability |
| CVE-2025-61594 | UR uri ruby | 7.5 | Dec 30 | URI Credential Leakage Bypass over CVE-2025-27221 |
| CVE-2025-58767 | RE rexml ruby | 5.3 | Sep 17 | REXML has a DoS condition when parsing malformed XML file |
| CVE-2025-24294 | RE resolv Ruby | 7.5 | Jul 12 | The attack vector is a potential Denial of Service (DoS) |
| CVE-2025-6442 | WE WEBrick Ruby | 5.9 | Jun 25 | Ruby WEBrick read_header HTTP Request Smuggling Vulnerability |
| CVE-2025-43857 | NE net-imap ruby | 6.5 | Apr 28 | net-imap rubygem vulnerable to possible DoS by memory exhaustion |
| CVE-2025-27788 | JS json ruby | 7.5 | Mar 12 | Ruby JSON Parser has Out-of-bounds Read |
| CVE-2025-25186 | NE net-imap ruby | 6.5 | Feb 10 | Net::IMAP vulnerable to possible DoS by memory exhaustion |
| CVE-2024-49761 | RE rexml ruby | 7.5 | Oct 28 | REXML ReDoS vulnerability |
| CVE-2024-43398 | RE rexml ruby | 5.9 | Aug 22 | REXML denial of service vulnerability |
| CVE-2024-41946 | RE rexml ruby | 7.5 | Aug 1 | REXML DoS vulnerability |
| CVE-2024-41123 | RE rexml ruby | 7.5 | Aug 1 | REXML DoS vulnerability |
| CVE-2024-39908 | RE rexml ruby | 4.3 | Jul 16 | Denial of service in REXML |
| CVE-2024-35176 | RE rexml ruby | 5.3 | May 16 | REXML contains a denial of service vulnerability |
| CVE-2024-27281 | RD Rdoc Ruby | 4.5 | May 8 | An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0 |