cve.nowby Sazabi

RubyGemsPackage

net-ldap

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 2

Registry: RubyGems

Advisories 2

CVE-2014-0083Unrated
The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.
Affected: fixed in 0.16.2.
CVE-2017-17718Unrated
The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.
Affected: fixed in 0.16.0.