Search for packages
| purl | pkg:rpm/redhat/rubygem-rdoc@3.8-9?arch=el6op |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-ebq1-gkhe-pua7
Aliases: CVE-2013-0269 GHSA-x457-cw4h-hq5f OSV-101137 |
Denial of Service and SQL Injection This package allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka. | There are no reported fixed by versions. |
|
VCID-pb4n-q6u8-syds
Aliases: CVE-2013-0256 GHSA-v2r9-c84j-v7xm OSV-90004 |
XSS exploit of RDoc documentation generated by rdoc This exploit may lead to cookie disclosure to third parties. The exploit exists in darkfish.js which is copied from the RDoc install location to the generated documentation. RDoc is a static documentation generation tool. Patching the library itself is insufficient to correct this exploit. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:52:31.850644+00:00 | RedHat Importer | Affected by | VCID-pb4n-q6u8-syds | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0256.json | 38.0.0 |
| 2026-04-01T14:52:30.288013+00:00 | RedHat Importer | Affected by | VCID-ebq1-gkhe-pua7 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0269.json | 38.0.0 |