Search for packages
| purl | pkg:gem/rest-client@1.6.1.a |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-u5nz-nn6j-8fhm
Aliases: CVE-2015-3448 GHSA-mx9f-w8qq-q5jf |
rest-client allows local users to obtain sensitive information by reading the log REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log. |
Affected by 1 other vulnerability. |
|
VCID-w33m-yjha-ckap
Aliases: CVE-2015-1820 GHSA-3fhf-6939-qg8p OSV-119878 |
rest-client Gem Vulnerable to Session Fixation REST client for Ruby (aka rest-client) versions 1.6.1.a until 1.8.0 allow remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-05-30T03:37:09.380476+00:00 | GitLab Importer | Affected by | VCID-u5nz-nn6j-8fhm | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/rest-client/CVE-2015-3448.yml | 38.6.0 |
| 2026-05-29T23:56:02.952983+00:00 | Ruby Importer | Affected by | VCID-u5nz-nn6j-8fhm | https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rest-client/CVE-2015-3448.yml | 38.6.0 |
| 2026-05-29T14:21:57.647893+00:00 | GHSA Importer | Affected by | VCID-w33m-yjha-ckap | https://github.com/advisories/GHSA-3fhf-6939-qg8p | 38.6.0 |