VulnerableCode Package Details - pkg:gem/secure

Search for packages

Vulnerability	Summary	Fixed by
VCID-472q-5p8p-efap Aliases: CVE-2020-5216 GHSA-w978-rmpf-qmwg	Limited header injection when using dynamic overrides with user input in RubyGems secure_headers	3.9.0 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 5.2.0 Affected by 0 other vulnerabilities. 6.0.0.alpha01 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 6.3.0 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-e24x-8vze-ukb6 Aliases: CVE-2020-5217 GHSA-xq52-rv6w-397c	Directive injection when using dynamic overrides with user input	3.8.0 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 5.1.0 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 6.2.0 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-472q-5p8p-efap
Aliases:
CVE-2020-5216
GHSA-w978-rmpf-qmwg

Limited header injection when using dynamic overrides with user input in RubyGems secure_headers

3.9.0
Affected by 2 other vulnerabilities.

5.2.0
Affected by 0 other vulnerabilities.

6.0.0.alpha01
Affected by 2 other vulnerabilities.

6.3.0
Affected by 2 other vulnerabilities.

VCID-e24x-8vze-ukb6
Aliases:
CVE-2020-5217
GHSA-xq52-rv6w-397c

Directive injection when using dynamic overrides with user input

3.8.0
Affected by 2 other vulnerabilities.

5.1.0
Affected by 2 other vulnerabilities.

6.2.0
Affected by 2 other vulnerabilities.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-13T09:20:33.141964+00:00	Ruby Importer	Affected by	VCID-e24x-8vze-ukb6	https://github.com/rubysec/ruby-advisory-db/blob/master/gems/secure_headers/CVE-2020-5217.yml	38.6.0
2026-06-13T09:20:31.944506+00:00	Ruby Importer	Affected by	VCID-472q-5p8p-efap	https://github.com/rubysec/ruby-advisory-db/blob/master/gems/secure_headers/CVE-2020-5216.yml	38.6.0
2026-06-12T17:17:07.363506+00:00	GitLab Importer	Affected by	VCID-472q-5p8p-efap	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/secure_headers/CVE-2020-5216.yml	38.6.0
2026-06-12T17:17:05.144266+00:00	GitLab Importer	Affected by	VCID-e24x-8vze-ukb6	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/secure_headers/CVE-2020-5217.yml	38.6.0