检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-RPRJ-G6XC-P5GQ CVE-2013-4413 | Wicked gem contains Path traversal vulnerability | 中危 | RubyGemswicked | 已审查 | 2017-10-25 02:33 | 2025-04-14 06:44 |
| GHSA-RG5M-3FQP-6PX8 CVE-2013-4389 | actionmailer email address processing causes Denial of service |
当前筛选结果 366,391 条 · 时间按北京时间显示
| 中危 |
RubyGemsactionmailer |
| 已审查 |
| 2017-10-25 02:33 |
| 2023-07-04 08:18 |
| GHSA-RFMF-RX8W-935W CVE-2013-5647 | Sounder Contains Arbitrary Command Execution Vulnerability | 高危 | RubyGemssounder | 已审查 | 2017-10-25 02:33 | 2023-07-04 05:20 |
| GHSA-R5HC-9XX5-97RW CVE-2013-4492 | i18n gem Cross-site Scripting vulnerability | 中危 | RubyGemsi18n | 已审查 | 2017-10-25 02:33 | 2023-07-04 08:12 |
| GHSA-R23G-3QW4-GFH2 CVE-2012-6684 | RedCloth Cross-site Scripting vulnerability | 中危 | RubyGemsRedCloth | 已审查 | 2017-10-25 02:33 | 2023-08-29 03:55 |
| GHSA-QRGF-JQQM-X7XV CVE-2013-5671 | Code injection in dragonfly gem | 高危 | RubyGemsdragonfly+1 | 已审查 | 2017-10-25 02:33 | 2023-01-24 22:54 |
| GHSA-QQXP-XP9V-VVX6 CVE-2012-6662 | jquery-ui Tooltip widget vulnerable to XSS | 中危 | Mavenjquery-ui+3 | 已审查 | 2017-10-25 02:33 | 2025-04-15 05:53 |
| GHSA-Q759-HWVC-M3JG CVE-2013-1855 | actionpack Cross-site Scripting vulnerability | 中危 | RubyGemsactionpack | 已审查 | 2017-10-25 02:33 | 2023-08-26 04:06 |
| GHSA-Q6CW-2553-7837 CVE-2013-0284 | newrelic_rpm Gem Discloses Sensitive Information | 中危 | RubyGemsnewrelic_rpm | 已审查 | 2017-10-25 02:33 | 2023-08-29 21:38 |
| GHSA-Q44R-F2HM-V76V CVE-2012-3867 | Pupper does not properly restrict characters in Common Name field of Certificate Signing Request | 中危 | RubyGemspuppet | 已审查 | 2017-10-25 02:33 | 2023-05-13 01:21 |
| GHSA-PCHC-949F-53M5 CVE-2013-0175 | Improper Input Validation in multi_xml | 高危 | RubyGemsmulti_xml | 已审查 | 2017-10-25 02:33 | 2023-02-14 01:01 |
| GHSA-P673-HJF2-PWFR CVE-2013-1875 | Shell command injection in command_wrap | 高危 | RubyGemscommand_wrap | 已审查 | 2017-10-25 02:33 | 2023-07-04 07:38 |
| GHSA-P463-639R-Q9G9 CVE-2013-1756 | Dragonfly Code Injection vulnerability | 高危 | RubyGemsdragonfly | 已审查 | 2017-10-25 02:33 | 2025-04-15 05:47 |
| GHSA-MPXF-GCW2-PW5Q CVE-2013-6414 | actionpack Improper Input Validation vulnerability | 中危 | RubyGemsactionpack | 已审查 | 2017-10-25 02:33 | 2023-08-01 02:14 |
| GHSA-MGX3-27HR-MFGP CVE-2013-1801 | HTTParty does not restrict casts of string values | 高危 | RubyGemshttparty | 已审查 | 2017-10-25 02:33 | 2023-03-15 04:47 |
| GHSA-M7FQ-CF8Q-35Q7 CVE-2013-1800 | crack does not properly restrict casts of string values | 高危 | RubyGemscrack | 已审查 | 2017-10-25 02:33 | 2023-01-24 05:21 |
| GHSA-M6F7-46HW-GRCJ CVE-2013-2090 | Creme Fraiche contains OS Command Injection | 严重 | RubyGemscremefraiche | 已审查 | 2017-10-25 02:33 | 2023-03-15 04:44 |
| GHSA-JXX8-V83V-RHW3 CVE-2013-1656 | Spree Improper Input Validation vulnerability | 中危 | RubyGemsspree | 已审查 | 2017-10-25 02:33 | 2023-08-29 17:24 |
| GHSA-JXHW-MG8M-2PJ8 CVE-2013-0233 | Devise does not properly perform type conversion when performing database queries | 中危 | RubyGemsdevise | 已审查 | 2017-10-25 02:33 | 2023-01-24 05:20 |
| GHSA-JMGW-6VJG-JJWG CVE-2013-0156 | actionpack Improper Input Validation vulnerability | 高危 | RubyGemsactionpack | 已审查 | 2017-10-25 02:33 | 2023-02-16 06:22 |
| GHSA-JG4M-Q6W8-VRJP CVE-2013-4203 | rgpg Code Injection vulnerability | 高危 | RubyGemsrgpg | 已审查 | 2017-10-25 02:33 | 2023-01-27 05:04 |
| GHSA-J838-VFPQ-FMF2 CVE-2013-1857 | actionpack Cross-site Scripting vulnerability | 中危 | RubyGemsactionpack | 已审查 | 2017-10-25 02:33 | 2023-01-24 01:47 |
| GHSA-HXX6-P24V-WG8C CVE-2013-2617 | Curl Gem insufficient URL escaping command injection | 高危 | RubyGemscurl | 已审查 | 2017-10-25 02:33 | 2023-08-29 18:57 |
| GHSA-H835-75HW-PJ89 CVE-2012-3464 | activesupport Cross-site Scripting vulnerability | 中危 | RubyGemsactivesupport | 已审查 | 2017-10-25 02:33 | 2025-01-22 00:46 |
| GHSA-H77X-M5Q8-C29H CVE-2012-6109 | Rack vulnerable to REDoS | 中危 | RubyGemsrack | 已审查 | 2017-10-25 02:33 | 2023-08-26 07:23 |