PatchFirst · Vulnerabilidades recientes
Vulnerabilidades publicadas para ruby en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 42
RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.
Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator/generator.c, which will stop after encountering a '\0' byte, returning a pointer to a string of length zero, which is not the length stored in space_len.
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.