Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:ebuild/dev-lang/ruby@2.5.9
purl pkg:ebuild/dev-lang/ruby@2.5.9
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (11)
Vulnerability Summary Aliases
VCID-1vp9-6q85-5ffv Reliance on Cookies without Validation and Integrity Checking in a Security Decision CGI::Cookie.parse in Ruby mishandles security prefixes in cookie names. This also affects the CGI gem for Ruby. CVE-2021-41819
GHSA-4vf4-qmvg-mh7h
VCID-2sv2-6snv-2bd3 Multiple vulnerabilities have been discovered in Ruby, the worst of which could lead to execution of arbitrary code. CVE-2022-28739
GHSA-mvgc-rxvg-hqc6
VCID-9g2w-sc9w-eyce Multiple vulnerabilities have been discovered in Ruby, the worst of which could lead to execution of arbitrary code. CVE-2021-33621
GHSA-vc47-6rqg-c7f5
VCID-9x9w-2k98-wydm Ruby Time component ReDoS issue A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2. CVE-2023-28756
GHSA-fg7x-g82r-94qc
VCID-gfjn-m9zp-57c5 Duplicate This advisory duplicates another. CVE-2021-41816
GHSA-5cqm-crxm-6qpv
GMS-2021-17
VCID-mkq9-21q7-6kg6 Regular expression denial of service vulnerability (ReDoS) in date Date includes a ReDoS vulnerability. CVE-2021-41817
GHSA-qg54-694p-wgpp
VCID-qwh3-25yu-qfga Multiple vulnerabilities have been discovered in Ruby, the worst of which could lead to execution of arbitrary code. CVE-2022-28738
GHSA-8pqg-8p79-j5j8
VCID-t9y5-hd9b-bkc4 Multiple vulnerabilities have been discovered in Ruby, the worst of which could lead to execution of arbitrary code. CVE-2021-31810
GHSA-wr95-679j-87v9
VCID-uxdx-abx7-fkdy Ruby URI component ReDoS issue A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1. CVE-2023-28755
GHSA-hv5j-3h9f-99c2
VCID-vcz9-dvf4-47am Multiple vulnerabilities have been discovered in Ruby, the worst of which could lead to execution of arbitrary code. CVE-2020-25613
GHSA-gwfg-cqmg-cf8f
VCID-xkby-43zv-x3f7 Multiple vulnerabilities have been discovered in Ruby, the worst of which could lead to execution of arbitrary code. CVE-2021-32066
GHSA-gx49-h5r3-q3xj

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:01:49.268435+00:00 Gentoo Importer Fixing VCID-9x9w-2k98-wydm https://security.gentoo.org/glsa/202401-27 38.0.0
2026-04-01T13:01:49.239769+00:00 Gentoo Importer Fixing VCID-uxdx-abx7-fkdy https://security.gentoo.org/glsa/202401-27 38.0.0
2026-04-01T13:01:49.211074+00:00 Gentoo Importer Fixing VCID-2sv2-6snv-2bd3 https://security.gentoo.org/glsa/202401-27 38.0.0
2026-04-01T13:01:49.179839+00:00 Gentoo Importer Fixing VCID-qwh3-25yu-qfga https://security.gentoo.org/glsa/202401-27 38.0.0
2026-04-01T13:01:49.149536+00:00 Gentoo Importer Fixing VCID-1vp9-6q85-5ffv https://security.gentoo.org/glsa/202401-27 38.0.0
2026-04-01T13:01:49.116369+00:00 Gentoo Importer Fixing VCID-mkq9-21q7-6kg6 https://security.gentoo.org/glsa/202401-27 38.0.0
2026-04-01T13:01:49.088373+00:00 Gentoo Importer Fixing VCID-gfjn-m9zp-57c5 https://security.gentoo.org/glsa/202401-27 38.0.0
2026-04-01T13:01:49.057693+00:00 Gentoo Importer Fixing VCID-9g2w-sc9w-eyce https://security.gentoo.org/glsa/202401-27 38.0.0
2026-04-01T13:01:49.027033+00:00 Gentoo Importer Fixing VCID-xkby-43zv-x3f7 https://security.gentoo.org/glsa/202401-27 38.0.0
2026-04-01T13:01:48.994724+00:00 Gentoo Importer Fixing VCID-t9y5-hd9b-bkc4 https://security.gentoo.org/glsa/202401-27 38.0.0
2026-04-01T13:01:48.963194+00:00 Gentoo Importer Fixing VCID-vcz9-dvf4-47am https://security.gentoo.org/glsa/202401-27 38.0.0