CVE security advisories and vulnerability history for rubygems-update by rubygems.
Last updated
rubygems rubygems-update has 25 published CVE records since 2007, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit.
This page aggregates every publicly disclosed vulnerability (CVE) affecting rubygems rubygems-update, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of rubygems rubygems-update's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
25 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of rubygems rubygems-update's CVEs are currently listed in CISA's KEV catalog.
Public exploits
1
One of rubygems rubygems-update's CVEs has a known public exploit available.
Browse every rubygems rubygems-update version named in a CVE, then pick one to see only the CVEs that affect it.
25 CVEs
The CWE weakness categories most often found in rubygems rubygems-update CVEs. Follow any weakness for its full explanation.
How many rubygems rubygems-update CVEs were published each year.
Browse vulnerabilities for other products by rubygems.
Common questions about rubygems rubygems-update vulnerabilities.
rubygems rubygems-update has 25 published CVE records since 2007.
None of rubygems rubygems-update's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Yes — 1 of rubygems rubygems-update's CVEs have a known public exploit.
22 distinct rubygems rubygems-update versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
rubygems rubygems-update's CVEs most often map to these CWE weakness types: CWE-150 (Improper Neutralization of Escape, Meta, or Control Sequences), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-350 (Reliance on Reverse DNS Resolution for a Security-Critical Action), CWE-502 (Deserialization of Untrusted Data).
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new rubygems rubygems-update vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
