Skip to main content
cve.nowby Sazabi
← RubyGems
RubyGemsPackage

rest-client

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3
Registry
RubyGems

Advisories 3

  • The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third…

    Affected: from 1.6.10, fixed in 1.7.0.

  • REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie…

    Affected: from 1.6.1.a, fixed in 1.8.0.

  • REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information…

    Affected: fixed in 1.7.3.