ruby vulnerabilities — 28 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
Unrated Critical Security Update for Ruby Package: Addressing Denial of Service Vulnerabilities ruby AlmaLinux 30 Sep 2026 2.5.9-116.module_el8.10.0+4294+1072b022
Unrated Critical Security Update for Ruby Package: Denial of Service Vulnerability ruby AlmaLinux 28 Sep 2026 3.3.12-9.module_el8.10.0+4288+ce06a94b
Unrated Critical Security Update for Ruby Package: Important Vulnerabilities Addressed ruby AlmaLinux 05 Aug 2026 3.3.12-8.module_el8.10.0+4241+4264e34b
Unrated Critical Security Update for Ruby Package: Addressing Multiple Vulnerabilities ruby AlmaLinux 30 Jun 2026 3.3.10-7.module_el8.10.0+4210+b037b1ec
Unrated Critical Security Update for Ruby Package: IMAP Command Injection and TLS Bypass Vulnerabilities ruby AlmaLinux 30 Jun 2026 2.5.9-115.module_el8.10.0+4212+150d00eb
Unrated Critical Security Flaw in Ruby Package: Arbitrary Code Execution via ERB Deserialization Bypass ruby AlmaLinux 26 May 2026 3.3.10-6.module_el8.10.0+4183+69a3c42f
Unrated Moderate Security Update for Ruby: Addressing Denial of Service Vulnerabilities ruby AlmaLinux 10 Dec 2025 3.3.10-5.module_el8.10.0+4075+e5f6dad1
Unrated Moderate Security Update for Ruby: Addressing Multiple Vulnerabilities ruby AlmaLinux 02 Jul 2025 3.3.8-4.module_el8.10.0+4022+8b66723c
Unrated Moderate Vulnerability in Ruby Package: Security Update Required ruby AlmaLinux 14 May 2025 2.5.9-114.module_el8.10.0+3991+5e651d4e
Unrated Moderate Security Update for Ruby: Addressing Multiple DoS Vulnerabilities ruby AlmaLinux 22 Apr 2025 3.1.7-145.module_el8.10.0+3984+cf55e3df
Unrated Critical Security Update for Ruby Packages: REXML ReDoS Vulnerability ruby AlmaLinux 05 Dec 2024 2.5.9-113.module_el8.10.0+3932+2d440da3
Unrated Critical Security Update for Ruby: Addressing REXML ReDoS Vulnerability ruby AlmaLinux 05 Dec 2024 3.1.5-144.module_el8.10.0+3933+43481280
Unrated Moderate Security Update for Ruby: Addressing DoS Vulnerabilities in REXML ruby AlmaLinux 18 Sep 2024 3.3.5-3.module_el8.10.0+3894+6d587c81
Unrated Moderate: Ruby Security Update ruby AlmaLinux 11 Jul 2024 2.5.9-112.module_el8.10.0+3871+342e2c2f
Unrated Moderate: ruby:3.3 security, bug fix, and enhancement update ruby AlmaLinux 06 Jun 2024 3.3.1-2.module_el8.10.0+3855+767cb125
Unrated Moderate: ruby:3.1 security, bug fix, and enhancement update ruby AlmaLinux 03 Jun 2024 3.1.5-143.module_el8.10.0+3854+02eaa59a
Unrated Moderate: ruby:3.0 security update ruby AlmaLinux 30 May 2024 3.0.7-143.module_el8.10.0+3852+ce828b19
Unrated Moderate: ruby:3.1 security, bug fix, and enhancement update ruby AlmaLinux 19 Mar 2024 3.1.4-142.module_el8.9.0+3746+91b8233a
Unrated Moderate: ruby:2.5 security update ruby AlmaLinux 14 Nov 2023 2.5.9-111.module_el8.9.0+3635+c6f99506
Unrated Moderate: ruby:2.7 security, bug fix, and enhancement update ruby AlmaLinux 27 Jun 2023 2.7.8-139.module_el8.8.0+3578+2b4b06da
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.