Search for packages
Package details: pkg:gem/rdoc@6.1.2.1
purl pkg:gem/rdoc@6.1.2.1
Next non-vulnerable version 6.3.4.1
Latest non-vulnerable version 6.6.3.1
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-421x-nuyc-aaap
Aliases:
CVE-2024-27281
GHSA-592j-995h-p23j
RDoc RCE vulnerability with .rdoc_options
6.3.4.1
Affected by 0 other vulnerabilities.
6.4.1.1
Affected by 0 other vulnerabilities.
6.5.1.1
Affected by 0 other vulnerabilities.
6.6.0
Affected by 1 other vulnerability.
6.6.3.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-gmf4-gcd5-aaab In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. CVE-2021-31799
GHSA-ggxm-pgc9-g7fp

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T13:43:32.235055+00:00 Ruby Importer Affected by VCID-421x-nuyc-aaap https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rdoc/CVE-2024-27281.yml 36.1.3
2025-06-03T20:27:06.067008+00:00 Ruby Importer Affected by VCID-421x-nuyc-aaap https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rdoc/CVE-2024-27281.yml 36.1.0
2025-06-02T20:15:57.996610+00:00 Ruby Importer Affected by VCID-421x-nuyc-aaap https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rdoc/CVE-2024-27281.yml 36.1.2
2025-04-15T18:42:36.852703+00:00 Ruby Importer Affected by VCID-421x-nuyc-aaap https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rdoc/CVE-2024-27281.yml 36.0.0
2024-10-17T17:36:33.018975+00:00 GitLab Importer Fixing VCID-gmf4-gcd5-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/rdoc/CVE-2021-31799.yml 34.0.2
2024-10-17T02:17:21.081685+00:00 GHSA Importer Fixing VCID-gmf4-gcd5-aaab https://github.com/advisories/GHSA-ggxm-pgc9-g7fp 34.0.2
2024-10-15T18:43:48.486490+00:00 GithubOSV Importer Fixing VCID-gmf4-gcd5-aaab https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-ggxm-pgc9-g7fp/GHSA-ggxm-pgc9-g7fp.json 34.0.2
2024-10-15T17:40:33.535940+00:00 Ruby Importer Affected by VCID-421x-nuyc-aaap https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rdoc/CVE-2024-27281.yml 34.0.2
2024-09-21T16:05:41.790139+00:00 Ruby Importer Affected by VCID-421x-nuyc-aaap https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rdoc/CVE-2024-27281.yml 34.0.1
2024-09-18T09:04:58.956954+00:00 GithubOSV Importer Fixing VCID-gmf4-gcd5-aaab https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-ggxm-pgc9-g7fp/GHSA-ggxm-pgc9-g7fp.json 34.0.1
2024-09-17T22:17:32.177886+00:00 GHSA Importer Fixing VCID-gmf4-gcd5-aaab https://github.com/advisories/GHSA-ggxm-pgc9-g7fp 34.0.1
2024-04-23T23:01:19.214719+00:00 GithubOSV Importer Fixing VCID-gmf4-gcd5-aaab https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-ggxm-pgc9-g7fp/GHSA-ggxm-pgc9-g7fp.json 34.0.0rc4
2024-01-03T17:47:06.903981+00:00 GHSA Importer Fixing VCID-gmf4-gcd5-aaab https://github.com/advisories/GHSA-ggxm-pgc9-g7fp 34.0.0rc1