Search for packages
| purl | pkg:ruby/ruby@1.9 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-5e5v-pmb2-zkba
Aliases: CVE-2006-5467 GHSA-cgqx-jwj4-2jc4 |
The Ruby cgi.rb CGI library is vulnerable to a Denial of Service attack. | There are no reported fixed by versions. |
|
VCID-e58n-x5ra-6ybq
Aliases: CVE-2010-2489 GHSA-pj28-mx3m-9668 OSV-66040 |
Ruby on Windows ARGF.inplace_mode Variable Local Overflow Buffer overflow in Ruby 1.9.x before 1.9.1-p429 on Windows might allow local users to gain privileges via a crafted ARGF.inplace_mode value that is not properly handled when constructing the filenames of the backup files. | There are no reported fixed by versions. |
|
VCID-ggcn-qfts-rbeu
Aliases: CVE-2013-2065 GHSA-wh77-3w5g-7q6x OSV-93414 |
Ruby: Object taint bypassing in DL and Fiddle | There are no reported fixed by versions. |
|
VCID-m6vt-b9kt-93hw
Aliases: CVE-2008-1145 GHSA-f279-rf2r-m6m5 |
ruby: webrick directory traversal | There are no reported fixed by versions. |
|
VCID-mtmk-9yt6-s3gv
Aliases: CVE-2009-4124 GHSA-9mvm-2xp2-9wmw OSV-60880 |
ruby: Heap-based buffer overflow in the rb_str_justify() function | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T15:18:13.473466+00:00 | Ruby Importer | Affected by | VCID-e58n-x5ra-6ybq | https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2010-2489.yml | 38.0.0 |
| 2026-04-01T15:18:13.056963+00:00 | Ruby Importer | Affected by | VCID-ggcn-qfts-rbeu | https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2013-2065.yml | 38.0.0 |
| 2026-04-01T15:18:12.947441+00:00 | Ruby Importer | Affected by | VCID-5e5v-pmb2-zkba | https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2006-5467.yml | 38.0.0 |
| 2026-04-01T15:18:12.238943+00:00 | Ruby Importer | Affected by | VCID-mtmk-9yt6-s3gv | https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2009-4124.yml | 38.0.0 |
| 2026-04-01T15:18:12.092877+00:00 | Ruby Importer | Affected by | VCID-m6vt-b9kt-93hw | https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2008-1145.yml | 38.0.0 |