Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/kajam@1.0.3.rc2
purl pkg:gem/kajam@1.0.3.rc2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.5
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2014-4999

Gain access to password information as local attacker There is s a flaw in /dataset/lib/dataset/database/postgresql.rb that is triggered as the … There are no reported fixed by versions.
OSVDB-108530

Arbitrary code execution There is a flaw in /dataset/lib/dataset/database/postgresql.rb that is triggered when handling metacharacters. This may allow a remote … There are no reported fixed by versions.
GHSA-4ph7-5c44-pppv
Aliases:
CVE-2014-4999
kajam allows local users to obtain sensitive information by listing the process `vendor/plugins/dataset/lib/dataset/database/mysql.rb` in the kajam gem 1.0.3.rc2 for Ruby … There are no reported fixed by versions.
This package is not known to fix any advisories.