Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/geminabox@0.13.8
purl pkg:gem/geminabox@0.13.8
Next non-vulnerable version 0.13.10
Latest non-vulnerable version 0.13.10
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-dzpc-n37z-8ybu
Aliases:
CVE-2017-16792
GHSA-653m-r33x-39ff
Cross-site Scripting A stored cross-site scripting (XSS) vulnerability in `geminabox` (Gem in a Box) allows attackers to inject arbitrary web script via the `homepage` value of a `.gemspec` file, related to `views/gem.erb` and `views/index.erb.`
0.13.10
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T09:41:43.873851+00:00 GitLab Importer Affected by VCID-dzpc-n37z-8ybu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/geminabox/CVE-2017-16792.yml 38.6.0