RubyGems vulnerabilities
1,087 vulnerabilities and 4,305 malicious packages in RubyGems. actionpack has the most reviewed advisories.
Most exploited RubyGems vulnerabilities
- CVE-2019-5418 Rails Ruby on Rails Path Traversal
- CVE-2016-0752 Ruby on Rails Directory Traversal
- CVE-2014-0130 Ruby on Rails Directory Traversal
- CVE-2020-11023 JQuery Cross-Site Scripting (XSS)
- CVE-2026-55107 Kobako Vulnerable to Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)
- CVE-2025-68271 Unauthenticated Remote Code Execution in openc3-api
- CVE-2011-10019 Spreecommerce < 0.60.2 Search Parameter RCE
- CVE-2024-46986 Arbitrary file write leading to RCE in Camaleon CMS
- CVE-2024-45409 The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector
- CVE-2022-30123 Possible shell escape sequence injection vulnerability in Rack
- CVE-2022-24803 Command Injection vulnerability in asciidoctor-include-ext
- CVE-2015-7541 colorscore Command Injection vulnerability
RubyGems packages with the most advisories
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.