ruby vulnerabilities — 20 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
Unrated Critical Security Update for Ruby Package: Denial of Service Vulnerability ruby AlmaLinux 28 Sep 2026 3.3.12-9.module_el9.8.0+320+13e2b195
Unrated Critical Security Update for Ruby: Addressing Denial of Service Vulnerability ruby AlmaLinux 28 Sep 2026 4.0.6-35.module_el9.8.0+319+116e6235
Unrated Denial of Service Vulnerability in Ruby Package - Important Security Update ruby AlmaLinux 28 Sep 2026 3.0.7-168.el9_8
Unrated Critical Security Update for Ruby Package: Addressing Multiple Vulnerabilities ruby AlmaLinux 05 Aug 2026 3.3.12-8.module_el9.8.0+288+22f1c9f2
Unrated Critical Security Update for Ruby Package: Addressing Multiple Vulnerabilities ruby AlmaLinux 05 Aug 2026 4.0.6-34.module_el9.8.0+289+5a070f48
Unrated Critical Security Update for Ruby: Addressing Denial of Service and Command Injection Vulnerabilities ruby AlmaLinux 30 Jun 2026 4.0.3-33.module_el9.8.0+273+a67497ba
Unrated Critical Security Update for Ruby Package: Addressing Multiple Vulnerabilities ruby AlmaLinux 30 Jun 2026 3.3.10-7.module_el9.8.0+272+38177c5f
Unrated Critical Security Flaw in Ruby Packages: IMAP Command Injection and TLS Bypass ruby AlmaLinux 30 Jun 2026 3.0.7-167.el9_8
Unrated Critical Security Update for Ruby Package: Denial of Service and Code Execution Vulnerabilities ruby AlmaLinux 26 May 2026 4.0.3-32.module_el9.8.0+251+5fdbd96b
Unrated Critical Security Flaw in Ruby Packages: ERB Deserialization Bypass ruby AlmaLinux 18 May 2026 3.0.7-166.el9_7
Unrated Critical Security Update for Ruby: Addressing Arbitrary Code Execution Vulnerability ruby AlmaLinux 18 May 2026 3.3.10-6.module_el9.7.0+245+447713a2
Unrated Moderate Security Update for Ruby: Addressing Denial of Service Vulnerabilities ruby AlmaLinux 10 Dec 2025 3.3.10-5.module_el9.7.0+193+58179166
Unrated Critical Security Update for Ruby Packages: REXML ReDoS Vulnerability ruby AlmaLinux 05 Dec 2024 3.1.5-145.module_el9.5.0+129+9ba7e8b1
Unrated Critical REXML ReDoS Vulnerability in Ruby Packages ruby AlmaLinux 05 Dec 2024 3.0.7-163.el9_5
Unrated Moderate Security Update for Ruby Packages: Addressing Multiple DoS Vulnerabilities ruby AlmaLinux 18 Sep 2024 3.3.5-3.module_el9.4.0+115+226a984b
Unrated Moderate: Ruby Security Update ruby AlmaLinux 11 Jun 2024 3.0.7-162.el9_4
Unrated Moderate: ruby:3.3 security, bug fix, and enhancement update ruby AlmaLinux 06 Jun 2024 3.3.1-2.module_el9.4.0+102+68a93853
Unrated Moderate: ruby:3.1 security, bug fix, and enhancement update ruby AlmaLinux 06 Jun 2024 3.1.5-144.module_el9.4.0+101+d58a8d95
Unrated Moderate: ruby:3.1 security, bug fix, and enhancement update ruby AlmaLinux 01 Apr 2024 3.1.4-143.module_el9.3.0+60+5ebc989a
Unrated Moderate: Ruby Security, Bug Fix, and Enhancement Update ruby AlmaLinux 20 Sep 2022 3.0.4-160.el9_0
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.