Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/net-ldap@0.16.0
purl pkg:gem/net-ldap@0.16.0
Next non-vulnerable version 0.16.2
Latest non-vulnerable version 0.16.2
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-kn5g-e6w1-kqhy
Aliases:
CVE-2014-0083
GHSA-qwgm-mxm4-3q2c
OSV-106108
net-ldap has weak salt when generating passwords The Ruby net-ldap gem before 0.16.2 uses a weak salt when generating SSHA passwords.
0.16.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-mv26-fzn6-vycf No validation of hostname certificate Net-ldap does not validate the hostname certificate. Ruby is relying on OpenSSL, and one common mistake made by users of OpenSSL is to assume that OpenSSL will validate the hostname in the server's certificate. did not perform hostname validation. and up contain support for hostname validation, but they still require the user to call a few functions to set it up. CVE-2017-17718
GHSA-m7p8-9w66-9frm

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T20:58:58.685658+00:00 GitLab Importer Affected by VCID-kn5g-e6w1-kqhy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/net-ldap/CVE-2014-0083.yml 38.4.0
2026-04-16T20:40:37.780621+00:00 GitLab Importer Fixing VCID-mv26-fzn6-vycf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/net-ldap/CVE-2017-17718.yml 38.4.0
2026-04-11T22:10:10.071826+00:00 GitLab Importer Affected by VCID-kn5g-e6w1-kqhy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/net-ldap/CVE-2014-0083.yml 38.3.0
2026-04-11T21:51:18.725119+00:00 GitLab Importer Fixing VCID-mv26-fzn6-vycf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/net-ldap/CVE-2017-17718.yml 38.3.0
2026-04-02T22:22:45.619336+00:00 GitLab Importer Affected by VCID-kn5g-e6w1-kqhy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/net-ldap/CVE-2014-0083.yml 38.1.0
2026-04-02T22:05:08.705117+00:00 GitLab Importer Fixing VCID-mv26-fzn6-vycf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/net-ldap/CVE-2017-17718.yml 38.1.0
2026-04-01T16:40:33.222470+00:00 GitLab Importer Affected by VCID-kn5g-e6w1-kqhy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/net-ldap/CVE-2014-0083.yml 38.0.0
2026-04-01T15:56:25.648676+00:00 GHSA Importer Fixing VCID-mv26-fzn6-vycf https://github.com/advisories/GHSA-m7p8-9w66-9frm 38.0.0
2026-04-01T13:03:45.446015+00:00 GithubOSV Importer Fixing VCID-mv26-fzn6-vycf https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/01/GHSA-m7p8-9w66-9frm/GHSA-m7p8-9w66-9frm.json 38.0.0
2026-04-01T12:47:30.915555+00:00 GitLab Importer Fixing VCID-mv26-fzn6-vycf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/net-ldap/CVE-2017-17718.yml 38.0.0