Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/ruby@3.0.3-1
purl pkg:alpm/archlinux/ruby@3.0.3-1
Next non-vulnerable version 3.0.4-1
Latest non-vulnerable version 3.0.4-1
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-2sv2-6snv-2bd3
Aliases:
CVE-2022-28739
GHSA-mvgc-rxvg-hqc6
Multiple vulnerabilities have been discovered in Ruby, the worst of which could lead to execution of arbitrary code.
3.0.4-1
Affected by 0 other vulnerabilities.
VCID-qwh3-25yu-qfga
Aliases:
CVE-2022-28738
GHSA-8pqg-8p79-j5j8
Multiple vulnerabilities have been discovered in Ruby, the worst of which could lead to execution of arbitrary code.
3.0.4-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-1vp9-6q85-5ffv Reliance on Cookies without Validation and Integrity Checking in a Security Decision CGI::Cookie.parse in Ruby mishandles security prefixes in cookie names. This also affects the CGI gem for Ruby. CVE-2021-41819
GHSA-4vf4-qmvg-mh7h
VCID-mkq9-21q7-6kg6 Regular expression denial of service vulnerability (ReDoS) in date Date includes a ReDoS vulnerability. CVE-2021-41817
GHSA-qg54-694p-wgpp

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:26:28.610944+00:00 Arch Linux Importer Fixing VCID-mkq9-21q7-6kg6 https://security.archlinux.org/AVG-2555 38.0.0
2026-04-01T18:26:28.586969+00:00 Arch Linux Importer Fixing VCID-1vp9-6q85-5ffv https://security.archlinux.org/AVG-2555 38.0.0
2026-04-01T18:25:09.532334+00:00 Arch Linux Importer Affected by VCID-qwh3-25yu-qfga https://security.archlinux.org/AVG-2757 38.0.0
2026-04-01T18:25:09.507589+00:00 Arch Linux Importer Affected by VCID-2sv2-6snv-2bd3 https://security.archlinux.org/AVG-2757 38.0.0