VulnerableCode Package Details - pkg:alpm/archlinux/ruby@3.0.2-2

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:alpm/archlinux/ruby@3.0.2-2

Essentials
History (3)

purl	pkg:alpm/archlinux/ruby@3.0.2-2

Next non-vulnerable version	3.0.4-1
Latest non-vulnerable version	3.0.4-1
Risk	4.5

Vulnerabilities affecting this package (3)

Vulnerability	Summary	Fixed by
VCID-1vp9-6q85-5ffv Aliases: CVE-2021-41819 GHSA-4vf4-qmvg-mh7h	Reliance on Cookies without Validation and Integrity Checking in a Security Decision CGI::Cookie.parse in Ruby mishandles security prefixes in cookie names. This also affects the CGI gem for Ruby.	3.0.3-1 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-gfjn-m9zp-57c5 Aliases: CVE-2021-41816 GHSA-5cqm-crxm-6qpv GMS-2021-17	Duplicate This advisory duplicates another.	There are no reported fixed by versions.
VCID-mkq9-21q7-6kg6 Aliases: CVE-2021-41817 GHSA-qg54-694p-wgpp	Regular expression denial of service vulnerability (ReDoS) in date Date includes a ReDoS vulnerability.	3.0.3-1 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-01T18:26:30.168252+00:00	Arch Linux Importer	Affected by	VCID-gfjn-m9zp-57c5	https://security.archlinux.org/AVG-2582	38.0.0
2026-04-01T18:26:28.607194+00:00	Arch Linux Importer	Affected by	VCID-mkq9-21q7-6kg6	https://security.archlinux.org/AVG-2555	38.0.0
2026-04-01T18:26:28.583310+00:00	Arch Linux Importer	Affected by	VCID-1vp9-6q85-5ffv	https://security.archlinux.org/AVG-2555	38.0.0