Search for packages
| purl | pkg:deb/debian/ruby2.7@0?distro=bullseye |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-d6tn-s1q2-a3hc | Unsafe object creation in json RubyGem The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269/GHSA-x457-cw4h-hq5f, but does not rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsing methods can lead to creation of a malicious object within the interpreter, with adverse effects that are application-dependent. |
CVE-2020-10663
GHSA-jphg-qwrw-7w9g |
| VCID-jgyw-q58q-7qgm | Tempfile on Windows path traversal vulnerability There is an unintentional directory creation vulnerability in `tmpdir` library bundled with Ruby on Windows. And there is also an unintentional file creation vulnerability in tempfile library bundled with Ruby on Windows, because it uses tmpdir internally. |
CVE-2021-28966
GHSA-46f2-3v63-3xrp |
| VCID-qwh3-25yu-qfga | Multiple vulnerabilities have been discovered in Ruby, the worst of which could lead to execution of arbitrary code. |
CVE-2022-28738
GHSA-8pqg-8p79-j5j8 |