Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/geminabox@0.13.10
purl pkg:gem/geminabox@0.13.10
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-wg5q-umta-2qav Cross-site Scripting A stored cross-site scripting (XSS) vulnerability in `geminabox` (Gem in a Box) allows attackers to inject arbitrary web script via the `homepage` value of a `.gemspec` file, related to `views/gem.erb` and `views/index.erb.` CVE-2017-16792

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:37:19.192225+00:00 GitLab Importer Fixing VCID-wg5q-umta-2qav https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/geminabox/CVE-2017-16792.yml 38.6.0