Ruby vulnerabilities
35 CVEs and advisories name Ruby as an affected vendor, newest first. Follow it as a feed.
- CVE-2013-6461Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
- CVE-2013-6460Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
- CVE-2016-2339An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize" function functionality of Ruby.
- CVE-2016-2337Type confusion exists in _cancel_eval Ruby's TclTkIp class method.
- CVE-2016-2336Type confusion exists in two methods of Ruby's WIN32OLE class, ole_invoke and ole_query_interface.