Known vulnerabilities in ruby2.5 (Debian package) 2.5.0~rc1-1

Vendor: Debian
Version: 2.5.0~rc1-1
Software CPE: cpe:2.3:o:debian:ruby2_5_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ruby2.5 (Debian package) version 2.5.0~rc1-1 ruby2.5 (Debian package) 2.5.0~rc1-1 is affected by 10 vulnerabilities: 2 high, 8 medium Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59824 - Incorrect Regular Expression
CVE-2021-41817
CWE-185 Medium
No
No
2.5.5-3+deb10u4 19.01.2022 SB2022011919
SB2022011920
SB2022020413
and 24 more
#VU58365 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-41819
CWE-451 Medium
No
No
2.5.5-3+deb10u4 25.11.2021 SB2021112503
SB2022011920
SB2022020413
and 21 more
#VU55489 - Improper Certificate Validation
CVE-2021-32066
CWE-295 Medium
No
No
2.5.5-3+deb10u4 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 28 more
#VU55488 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31810
CWE-200 Medium
No
No
2.5.5-3+deb10u4 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 27 more
#VU52796 - Command injection
CVE-2021-31799
CWE-77 High
No
No
2.5.5-3+deb10u4 03.05.2021 SB2021050306
SB2021052413
SB2021052414
and 27 more
#VU52000 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-28965
CWE-611 Medium
No
No
2.5.5-3+deb10u4 08.04.2021 SB2021040816
SB2021041365
SB2021042119
and 24 more
#VU23009 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-16255
CWE-94 High
No
No
2.5.5-3+deb10u1 27.11.2019 SB2019100211
SB2019112701
SB2019121714
and 14 more
#VU23008 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-16254
CWE-113 Medium
No
No
2.5.5-3+deb10u1 27.11.2019 SB2019100211
SB2019112701
SB2019121714
and 14 more
#VU23007 - Improper input validation
CVE-2019-16201
CWE-20 Medium
No
No
2.5.5-3+deb10u1 27.11.2019 SB2019100211
SB2019112701
SB2019121714
and 14 more
#VU23006 - Improper input validation
CVE-2019-15845
CWE-20 Medium
No
No
2.5.5-3+deb10u1 26.11.2019 SB2019100211
SB2019112701
SB2019121714
and 15 more