Known vulnerabilities in ruby

Vendor: openEuler
Software: ruby
Software CPE: cpe:2.3:o:openeuler:ruby:*:*:*:*:*:openeuler:*:*
Total vulnerabilities: 38
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ruby ruby is affected by 38 known vulnerabilities: 6 high, 29 medium, 3 low Critical High Medium Low

Vulnerabilities (38)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145888 - Resource exhaustion
CVE-2026-80212
CWE-400 Medium
No
No
2.5.8-143, 3.0.3-150 27.08.2026 SB2026082726
SB2026090515
SB2026090516
and 12 more
#VU145889 - Improper input validation
CVE-2026-80213
CWE-20 Medium
No
No
3.2.2-161 27.08.2026 SB2026082726
SB2026091009
SB2026091025
and 6 more
#VU126646 - Buffer overflow
CVE-2026-27820
CWE-120 High
No
No
3.2.2-157 21.04.2026 SB2026042132
SB2026042133
SB2026083029
and 1 more
#VU126644 - Improper Access Control
CVE-2026-41316
CWE-284 High
No
No
3.2.2-152 21.04.2026 SB2026042131
SB20260509132
SB2026051815
and 11 more
#VU116663 - Exposure of sensitive information to an unauthorized actor
CVE-2025-61594
CWE-200 Medium
No
No
3.0.3-144 07.10.2025 SB2025100723
SB2025110338
SB2025111485
and 4 more
#VU115794 - Resource exhaustion
CVE-2025-58767
CWE-400 Low
No
No
3.0.3-144 18.09.2025 SB2025091868
SB2025102434
SB2025110338
and 12 more
#VU114812 - Resource exhaustion
CVE-2025-24294
CWE-400 Medium
No
No
3.2.2-157 04.09.2025 SB2025090467
SB2025090470
SB2025090473
and 12 more
#VU114416 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-6442
CWE-444 Medium
No
No
2.5.8-135 25.08.2025 SB2024100844
SB2025082565
SB2025082567
and 10 more
#VU112026 - Asymmetric Resource Consumption (Amplification)
CVE-2025-25186
CWE-405 Medium
No
No
3.2.2-148 27.06.2025 SB2025062740
SB2025062741
SB2025062742
and 7 more
#VU108125 - Resource exhaustion
CVE-2025-43857
CWE-400 Low
No
No
3.0.3-143 02.05.2025 SB2025050219
SB2025061336
SB2025081224
and 1 more
#VU105107 - Inefficient Regular Expression Complexity
CVE-2025-27220
CWE-1333 Medium
No
No
2.5.8-133, 3.0.3-142, 3.2.2-149 27.02.2025 SB20250227242
SB2025030761
SB2025031451
and 9 more
#VU105106 - Improper input validation
CVE-2025-27219
CWE-20 Medium
No
No
2.5.8-133, 3.0.3-142, 3.2.2-149 27.02.2025 SB20250227242
SB2025030761
SB2025031451
and 15 more
#VU105105 - Exposure of sensitive information to an unauthorized actor
CVE-2025-27221
CWE-200 Medium
No
No
2.5.8-133, 3.0.3-142, 3.0.3-144, 3.2.2-149 27.02.2025 SB20250227241
SB2025030761
SB2025031451
and 16 more
#VU99358 - Inefficient Regular Expression Complexity
CVE-2024-49761
CWE-1333 Medium
No
No
2.5.8-131 28.10.2024 SB2024102837
SB2024110504
SB20241108111
and 38 more
#VU98142 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-47220
CWE-444 Medium
No
No
2.5.8-130 08.10.2024 SB2024100844
SB2024100847
SB2024100853
and 16 more
#VU96998 - Improper input validation
CVE-2024-35221
CWE-20 Medium
No
No
2.5.8-125, 3.2.2-142 10.09.2024 SB2024091055
SB2024091063
SB2024091070
and 4 more
#VU96970 - Resource exhaustion
CVE-2024-43398
CWE-400 Medium
No
No
3.0.3-139 10.09.2024 SB2024091006
SB2024091007
SB2024091008
and 28 more
#VU95149 - Improper input validation
CVE-2024-41123
CWE-20 Medium
No
No
3.0.3-139 01.08.2024 SB2024080145
SB2024091009
SB2024091607
and 24 more
#VU94363 - Improper input validation
CVE-2024-39908
CWE-20 Medium
No
No
3.0.3-139 16.07.2024 SB2024071616
SB2024083015
SB2024091009
and 22 more
#VU59824 - Incorrect Regular Expression
CVE-2021-41817
CWE-185 Medium
No
No
2.5.8-132 19.01.2022 SB2022011919
SB2022011920
SB2022020413
and 24 more


Showing elements 1 - 20 out of 38