Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/ruby@1.8.5-19.el5_6?arch=1
purl pkg:rpm/redhat/ruby@1.8.5-19.el5_6?arch=1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-9ukz-9357-aqb6
Aliases:
CVE-2010-0541
GHSA-h9r2-943c-qg8v
OSV-65556
Ruby WEBrick javascript injection flaw There are no reported fixed by versions.
VCID-bv9s-j5yk-m3aw
Aliases:
CVE-2009-4492
GHSA-6mq2-37j5-w6r6
OSV-61774
WEBrick Improper Input Validation vulnerability WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. There are no reported fixed by versions.
VCID-nxub-6qsu-hbhk
Aliases:
CVE-2011-0188
GHSA-6vch-6cgr-x9c3
Multiple vulnerabilities have been found in Ruby, allowing context-dependent attackers to cause a Denial of Service condition. There are no reported fixed by versions.
VCID-rh8q-s45v-xbhg
Aliases:
CVE-2011-1004
GHSA-45wv-gc6w-fq7m
OSV-70958
Multiple vulnerabilities have been found in Ruby, allowing context-dependent attackers to cause a Denial of Service condition. There are no reported fixed by versions.
VCID-t1p6-1u4n-gybf
Aliases:
CVE-2011-1005
GHSA-h2rc-3ppq-6pjg
OSV-70957
Multiple vulnerabilities have been found in Ruby, allowing context-dependent attackers to cause a Denial of Service condition. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:57:26.435949+00:00 RedHat Importer Affected by VCID-bv9s-j5yk-m3aw https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4492.json 38.0.0
2026-04-01T14:57:14.302662+00:00 RedHat Importer Affected by VCID-9ukz-9357-aqb6 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0541.json 38.0.0
2026-04-01T14:56:44.215705+00:00 RedHat Importer Affected by VCID-t1p6-1u4n-gybf https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1005.json 38.0.0
2026-04-01T14:56:44.191018+00:00 RedHat Importer Affected by VCID-rh8q-s45v-xbhg https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1004.json 38.0.0
2026-04-01T14:56:43.686587+00:00 RedHat Importer Affected by VCID-nxub-6qsu-hbhk https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0188.json 38.0.0