Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:ruby/ruby@1.8.7
purl pkg:ruby/ruby@1.8.7
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (18)
Vulnerability Summary Fixed by
VCID-4yvc-uzev-wua4
Aliases:
CVE-2008-3655
GHSA-p524-ppf2-w36w
Multiple vulnerabilities have been discovered in Ruby that allow for attacks including arbitrary code execution and Denial of Service. There are no reported fixed by versions.
VCID-5bte-uex2-f7du
Aliases:
CVE-2008-2664
GHSA-c4h6-p7gp-39x2
OSV-46552
Multiple vulnerabilities have been discovered in Ruby that allow for attacks including arbitrary code execution and Denial of Service. There are no reported fixed by versions.
VCID-8fbf-8fea-27d9
Aliases:
CVE-2008-1447
Two vulnerabilities in dnsmasq might allow for a Denial of Service or spoofing of DNS replies. There are no reported fixed by versions.
VCID-94vg-kqhg-qfdv
Aliases:
CVE-2007-5770
GHSA-mf83-c25g-48r6
net:: * modules There are no reported fixed by versions.
VCID-9gp6-pvw1-ufhs
Aliases:
CVE-2008-2725
GHSA-924x-9756-qq8p
OSV-46553
Multiple vulnerabilities have been discovered in Ruby that allow for attacks including arbitrary code execution and Denial of Service. There are no reported fixed by versions.
VCID-9ukz-9357-aqb6
Aliases:
CVE-2010-0541
GHSA-h9r2-943c-qg8v
OSV-65556
Ruby WEBrick javascript injection flaw There are no reported fixed by versions.
VCID-a15m-bcma-vfa7
Aliases:
CVE-2008-3656
GHSA-823x-6r7f-v9x6
Multiple vulnerabilities have been discovered in Ruby that allow for attacks including arbitrary code execution and Denial of Service. There are no reported fixed by versions.
VCID-bv9s-j5yk-m3aw
Aliases:
CVE-2009-4492
GHSA-6mq2-37j5-w6r6
OSV-61774
WEBrick Improper Input Validation vulnerability WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. There are no reported fixed by versions.
VCID-c9sy-czbr-tfer
Aliases:
CVE-2008-2726
GHSA-v2mw-g73g-923h
OSV-46554
Multiple vulnerabilities have been discovered in Ruby that allow for attacks including arbitrary code execution and Denial of Service. There are no reported fixed by versions.
VCID-ea13-mua4-1fb9
Aliases:
CVE-2008-1891
GHSA-rhf2-x48g-5wr7
ruby: WEBrick CGI source disclosure There are no reported fixed by versions.
VCID-fw7k-88kf-1kgg
Aliases:
CVE-2008-3657
GHSA-5f6v-fgcw-j5px
Multiple vulnerabilities have been discovered in Ruby that allow for attacks including arbitrary code execution and Denial of Service. There are no reported fixed by versions.
VCID-jx79-wpg7-2yaa
Aliases:
CVE-2008-2662
GHSA-6wwf-x53r-5qqq
OSV-46550
Multiple vulnerabilities have been discovered in Ruby that allow for attacks including arbitrary code execution and Denial of Service. There are no reported fixed by versions.
VCID-mzqm-gc4w-fbfp
Aliases:
CVE-2008-2663
GHSA-8rh4-h2wx-5jpx
OSV-46551
Multiple vulnerabilities have been discovered in Ruby that allow for attacks including arbitrary code execution and Denial of Service. There are no reported fixed by versions.
VCID-nsa4-b31c-37g2
Aliases:
CVE-2008-2376
GHSA-f7wf-fwmg-r7g3
Multiple vulnerabilities have been discovered in Ruby that allow for attacks including arbitrary code execution and Denial of Service. There are no reported fixed by versions.
VCID-pegr-f5mh-ekdz
Aliases:
CVE-2008-3905
GHSA-vwcj-mf69-7rfw
Multiple vulnerabilities have been discovered in Ruby that allow for attacks including arbitrary code execution and Denial of Service. There are no reported fixed by versions.
VCID-qjwb-ph9u-bubf
Aliases:
CVE-2008-3443
ruby: Memory allocation failure in Ruby regex engine (remotely exploitable DoS) There are no reported fixed by versions.
VCID-xtny-ychb-fff1
Aliases:
CVE-2009-0642
GHSA-4gvm-4mw2-9fpv
ruby: Incorrect checks for validity of X.509 certificates There are no reported fixed by versions.
VCID-ynyp-ybd9-57df
Aliases:
CVE-2009-1904
GHSA-prwc-wj59-8vwr
OSV-55031
A flaw in the Ruby standard library might allow remote attackers to cause a Denial of Service attack. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T15:18:13.659919+00:00 Ruby Importer Affected by VCID-mzqm-gc4w-fbfp https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2008-2663.yml 38.0.0
2026-04-01T15:18:13.238114+00:00 Ruby Importer Affected by VCID-c9sy-czbr-tfer https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2008-2726.yml 38.0.0
2026-04-01T15:18:13.075100+00:00 Ruby Importer Affected by VCID-nsa4-b31c-37g2 https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2008-2376.yml 38.0.0
2026-04-01T15:18:12.969659+00:00 Ruby Importer Affected by VCID-a15m-bcma-vfa7 https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2008-3656.yml 38.0.0
2026-04-01T15:18:12.759063+00:00 Ruby Importer Affected by VCID-9gp6-pvw1-ufhs https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2008-2725.yml 38.0.0
2026-04-01T15:18:12.472191+00:00 Ruby Importer Affected by VCID-fw7k-88kf-1kgg https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2008-3657.yml 38.0.0
2026-04-01T15:18:12.392809+00:00 Ruby Importer Affected by VCID-jx79-wpg7-2yaa https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2008-2662.yml 38.0.0
2026-04-01T15:18:12.324126+00:00 Ruby Importer Affected by VCID-ynyp-ybd9-57df https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2009-1904.yml 38.0.0
2026-04-01T15:18:12.209522+00:00 Ruby Importer Affected by VCID-qjwb-ph9u-bubf https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2008-3443.yml 38.0.0
2026-04-01T15:18:11.472440+00:00 Ruby Importer Affected by VCID-4yvc-uzev-wua4 https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2008-3655.yml 38.0.0
2026-04-01T15:18:11.324490+00:00 Ruby Importer Affected by VCID-pegr-f5mh-ekdz https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2008-3905.yml 38.0.0
2026-04-01T15:18:11.231911+00:00 Ruby Importer Affected by VCID-ea13-mua4-1fb9 https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2008-1891.yml 38.0.0
2026-04-01T15:18:11.180637+00:00 Ruby Importer Affected by VCID-xtny-ychb-fff1 https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2009-0642.yml 38.0.0
2026-04-01T15:18:11.150523+00:00 Ruby Importer Affected by VCID-8fbf-8fea-27d9 https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2008-1447.yml 38.0.0
2026-04-01T15:18:11.017462+00:00 Ruby Importer Affected by VCID-bv9s-j5yk-m3aw https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2009-4492.yml 38.0.0
2026-04-01T15:18:10.919462+00:00 Ruby Importer Affected by VCID-9ukz-9357-aqb6 https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2010-0541.yml 38.0.0
2026-04-01T15:18:10.886096+00:00 Ruby Importer Affected by VCID-5bte-uex2-f7du https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2008-2664.yml 38.0.0
2026-04-01T15:18:10.812405+00:00 Ruby Importer Affected by VCID-94vg-kqhg-qfdv https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2007-5770.yml 38.0.0