漏洞公告

Mail Gem Path Traversal vulnerability

Puppet allows local users to overwrite arbitrary files via a symlink attack

Rails Denial of Service vulnerability

Moderate severity vulnerability that affects rails

activesupport Cross-site Scripting vulnerability

actionpack Improper Authentication vulnerability

Cross site scripting that affects rails

Improper Input Validation in actionpack

activerecord vulnerable to SQL Injection

Rails actionpack gem vulnerable to Cross-site Scripting

sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges

WEBrick Improper Input Validation vulnerability

actionpack allows remote attackers to bypass intended access restrictions

actionpack Improper Input Validation vulnerability

Cross-site Scripting in actionpack

actionpack Cross-Site Request Forgery vulnerability

Deserialization Code Execution in js-yaml

activesupport in Rails vulnerable to incorrect data conversion

JSON gem has Improper Input Validation vulnerability

MiniMagick Gem for Ruby URI Handling Arbitrary Command Injection

insecure temporary directory usage in passenger

fastreader Gem for Ruby URI Handling Arbitrary Command Injection

RDoc contains XSS vulnerability