Known vulnerabilities in ruby
Vendor:
Fedoraproject
Software:
ruby
Software CPE:
cpe:2.3:o:fedoraproject:ruby:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
65
Public exploits:
3
Known exploited (KEV):
0
Breakdown by Severity Chart
3.4.10-32.fc43
4.0.6-38.fc44
4.0.6-38.fc45
4.0.6-38.fc46
4.0.6-36.fc44
4.0.6-36.fc45
3.4.10-31.fc43
3.4.7-26.fc42
3.3.10-21.fc41
2.7.2-135.fc32
2.7.2-135.fc33
2.6.6-125.fc31
2.5.5-108.fc28
2.5.5-101.fc29
2.4.5-90.fc27
2.5.3-94.fc28
2.5.3-99.fc29
2.4.4-89.fc27
2.4.4-88.fc27
2.4.4-88.fc26
2.5.1-92.fc28
2.4.3-87.fc26
2.4.3-87.fc27
2.4.3-86.fc26
2.4.3-86.fc27
2.4.2-84.fc26
2.4.2-84.fc27
2.3.4-64.fc25
2.3.4-63.fc24
2.3.4-63.fc25
2.3.3-62.fc24
2.3.3-62.fc25
2.2.4-47.fc22
2.2.4-47.fc23
2.2.2-11.fc22
2.1.6-27.fc21
2.1.4-24.fc21
3.3.8-19.fc40
3.3.8-19.fc41
3.0.5-155.fc35
3.1.3-172.fc36
3.1.3-172.fc37
3.0.4-153.fc34
3.0.4-153.fc35
3.1.2-164.fc36
3.0.2-149.fc34
2.7-3320210609104615.601d93de
2.7-3420210609104615.058368ca
2.7.3-136.fc32
2.7.3-136.fc33
3.0.1-148.fc34
3.2.5-183.fc39
3.3.5-14.fc40
3.3.5-14.fc41
3.3.5-14.fc42
3.3.4-11.fc40
3.2.4-182.fc38
3.2.4-182.fc39
3.3.1-7.fc40
3.1.4-175.fc36
3.1.4-175.fc37
3.2.2-180.fc38
Vulnerabilities (65)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU145888 - Resource exhaustion CVE-2026-80212 |
CWE-400 | Medium | 3.4.10-32.fc43, 4.0.6-38.fc44, 4.0.6-38.fc45, 4.0.6-38.fc46 | 27.08.2026 |
SB2026082726 SB2026090515 SB2026090516 and 12 more |
||
| #VU145889 - Improper input validation CVE-2026-80213 |
CWE-20 | Medium | 3.4.10-32.fc43, 4.0.6-38.fc44, 4.0.6-38.fc45, 4.0.6-38.fc46 | 27.08.2026 |
SB2026082726 SB2026091009 SB2026091025 and 6 more |
||
| #VU116663 - Exposure of sensitive information to an unauthorized actor CVE-2025-61594 |
CWE-200 | Medium | 3.4.7-26.fc42 | 07.10.2025 |
SB2025100723 SB2025110338 SB2025111485 and 4 more |
||
| #VU115794 - Resource exhaustion CVE-2025-58767 |
CWE-400 | Low | 3.3.10-21.fc41, 3.4.7-26.fc42 | 18.09.2025 |
SB2025091868 SB2025102434 SB2025110338 and 12 more |
||
| #VU112026 - Asymmetric Resource Consumption (Amplification) CVE-2025-25186 |
CWE-405 | Medium | 3.3.8-19.fc40, 3.3.8-19.fc41 | 27.06.2025 |
SB2025062740 SB2025062741 SB2025062742 and 7 more |
||
| #VU105106 - Improper input validation CVE-2025-27219 |
CWE-20 | Medium | 3.3.8-19.fc40, 3.3.8-19.fc41 | 27.02.2025 |
SB20250227242 SB2025030761 SB2025031451 and 15 more |
||
| #VU105105 - Exposure of sensitive information to an unauthorized actor CVE-2025-27221 |
CWE-200 | Medium | 3.3.8-19.fc40, 3.3.8-19.fc41 | 27.02.2025 |
SB20250227241 SB2025030761 SB2025031451 and 16 more |
||
| #VU96970 - Resource exhaustion CVE-2024-43398 |
CWE-400 | Medium | 3.3.5-14.fc40, 3.3.5-14.fc41, 3.3.5-14.fc42 | 10.09.2024 |
SB2024091006 SB2024091007 SB2024091008 and 28 more |
||
| #VU94361 - Improper input validation CVE-2024-35176 |
CWE-20 | Medium | 3.2.5-183.fc39, 3.3.4-11.fc40 | 16.07.2024 |
SB2024071615 SB2024071914 SB2024072112 and 19 more |
||
| #VU88970 - Out-of-bounds read CVE-2024-27282 |
CWE-125 | Medium | 3.2.4-182.fc38, 3.2.4-182.fc39, 3.3.1-7.fc40 | 24.04.2024 |
SB2024042420 SB2024042421 SB2024042450 and 21 more |
||
| #VU87693 - Out-of-bounds read CVE-2024-27280 |
CWE-125 | Medium | 3.2.4-182.fc38, 3.2.4-182.fc39, 3.3.1-7.fc40 | 21.03.2024 |
SB2024032138 SB2024041295 SB2024042421 and 22 more |
||
| #VU87692 - Improper input validation CVE-2024-27281 |
CWE-20 | High | 3.2.4-182.fc38, 3.2.4-182.fc39, 3.3.1-7.fc40 | 21.03.2024 |
SB2024032137 SB2024041295 SB2024042421 and 18 more |
||
| #VU77803 - Incorrect Regular Expression CVE-2023-36617 |
CWE-185 | Medium | 3.2.4-182.fc38, 3.2.4-182.fc39 | 29.06.2023 |
SB2023062931 SB2023071289 SB2023101967 and 13 more |
||
| #VU74007 - Incorrect Regular Expression CVE-2023-28756 |
CWE-185 | Medium | 3.1.4-175.fc36, 3.1.4-175.fc37, 3.2.2-180.fc38 | 24.03.2023 |
SB2023033146 SB2023050430 SB2023051746 and 33 more |
||
| #VU74004 - Incorrect Regular Expression CVE-2023-28755 |
CWE-185 | Medium | 3.1.4-175.fc36, 3.1.4-175.fc37, 3.2.2-180.fc38, 3.2.4-182.fc38, 3.2.4-182.fc39 | 24.03.2023 |
SB2023033146 SB2023042108 SB2023050430 and 41 more |
||
| #VU69506 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2021-33621 |
CWE-113 | Medium | 3.0.5-155.fc35, 3.1.3-172.fc36, 3.1.3-172.fc37 | 22.11.2022 |
SB2022112239 SB2022112439 SB2023011730 and 31 more |
||
| #VU62081 - Type conversion CVE-2022-28739 |
CWE-704 | High | 3.0.4-153.fc34, 3.0.4-153.fc35, 3.1.2-164.fc36 | 12.04.2022 |
SB2022041215 SB2022041404 SB2022060704 and 28 more |
||
| #VU59824 - Incorrect Regular Expression CVE-2021-41817 |
CWE-185 | Medium | 3.0.4-153.fc34, 3.0.4-153.fc35 | 19.01.2022 |
SB2022011919 SB2022011920 SB2022020413 and 24 more |
||
| #VU58365 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2021-41819 |
CWE-451 | Medium | 3.0.4-153.fc34, 3.0.4-153.fc35 | 25.11.2021 |
SB2021112503 SB2022011920 SB2022020413 and 21 more |
||
| #VU58364 - Memory corruption CVE-2021-41816 |
CWE-119 | High | 3.0.4-153.fc34, 3.0.4-153.fc35 | 25.11.2021 |
SB2021112503 SB2022011920 SB2022020414 and 7 more |
Showing elements 1 - 20 out of 65