# rest-client (RubyGems) vulnerabilities

3 known vulnerabilities, with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://rubygems.org/gems/rest-client

## Advisories (3)

### [CVE-2019-15224](https://cve.now/CVE-2019-15224): The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third…

- Severity: Unrated
- Published: Aug 19, 2019
- Affected: from 1.6.10, fixed in 1.7.0.

### [CVE-2015-1820](https://cve.now/CVE-2015-1820): REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie…

- Severity: Unrated
- Published: Aug 9, 2017
- Affected: from 1.6.1.a, fixed in 1.8.0.

### [CVE-2015-3448](https://cve.now/CVE-2015-3448): REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information…

- Severity: Unrated
- Published: Apr 29, 2015
- Affected: fixed in 1.7.3.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/rubygems/rest-client
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.