What’s Vulnerable › Products

rubygems.org vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your rubygems.org version is affected

Latest rubygems.org vulnerabilities

• CVE-2024-35221 — Denial of service when publishing a package on rubygems.org (CVSS 4.3)
• CVE-2024-21654 — rubygems.org MFA Bypass through password reset function could allow account takeover (CVSS 9.8)
• CVE-2023-40165 — Unauthorized gem replacement for full names ending in numbers on rubygems.org (CVSS 7.5)
• CVE-2022-29218 — Unauthorized takeover for new versions of some platform-specific gems (CVSS 7.5)
• CVE-2022-29176 — Unauthorized gem takeover for some gems on rubygems.org (CVSS 7.5)