rubygems

Products

Exploited and recent CVEs

• CVE-2024-35221 Medium 4.3 Denial of service when publishing a package on rubygems.org 0.5%
• CVE-2024-21654 Medium 4.8 rubygems.org MFA Bypass through password reset function could allow account takeover 0.5%
• CVE-2023-40165 High 7.4 Unauthorized gem replacement for full names ending in numbers on rubygems.org 0.5%
• CVE-2022-36073 High 8.3 RubyGems allows creation of users with arbitrary unverified emails 1.0%
• CVE-2022-29218 High 7.7 Unauthorized takeover for new versions of some platform-specific gems 1.3%
• CVE-2022-29176 Critical 9.9 Unauthorized gem takeover for some gems on rubygems.org 1.9%
• CVE-2021-43809 Medium 6.7 Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile 2.9%