Known vulnerabilities in rubygem-power_assert

Vendor: openEuler
Software: rubygem-power_assert
Software CPE: cpe:2.3:o:openeuler:rubygem-power_assert:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 25
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rubygem-power_assert rubygem-power_assert is affected by 25 known vulnerabilities: 4 high, 20 medium, 1 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145888 - Resource exhaustion
CVE-2026-80212		 CWE-400 Medium
No
No
 1.1.1-143 27.08.2026 SB2026082726
SB2026090515
SB2026090516
and 12 more
#VU114416 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-6442		 CWE-444 Medium
No
No
 1.1.1-135 25.08.2025 SB2024100844
SB2025082565
SB2025082567
and 10 more
#VU105107 - Inefficient Regular Expression Complexity
CVE-2025-27220		 CWE-1333 Medium
No
No
 1.1.1-133 27.02.2025 SB20250227242
SB2025030761
SB2025031451
and 9 more
#VU105106 - Improper input validation
CVE-2025-27219		 CWE-20 Medium
No
No
 1.1.1-133 27.02.2025 SB20250227242
SB2025030761
SB2025031451
and 15 more
#VU105105 - Exposure of sensitive information to an unauthorized actor
CVE-2025-27221		 CWE-200 Medium
No
No
 1.1.1-133 27.02.2025 SB20250227241
SB2025030761
SB2025031451
and 16 more
#VU99358 - Inefficient Regular Expression Complexity
CVE-2024-49761		 CWE-1333 Medium
No
No
 1.1.1-131 28.10.2024 SB2024102837
SB2024110504
SB20241108111
and 38 more
#VU98142 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-47220		 CWE-444 Medium
No
No
 1.1.1-130 08.10.2024 SB2024100844
SB2024100847
SB2024100853
and 16 more
#VU96998 - Improper input validation
CVE-2024-35221		 CWE-20 Medium
No
No
 1.1.1-125 10.09.2024 SB2024091055
SB2024091063
SB2024091070
and 4 more
#VU88970 - Out-of-bounds read
CVE-2024-27282		 CWE-125 Medium
No
No
 1.1.1-124 24.04.2024 SB2024042420
SB2024042421
SB2024042450
and 21 more
#VU87693 - Out-of-bounds read
CVE-2024-27280		 CWE-125 Medium
No
No
 1.1.1-122 21.03.2024 SB2024032138
SB2024041295
SB2024042421
and 22 more
#VU87692 - Improper input validation
CVE-2024-27281		 CWE-20 High
No
No
 1.1.1-122 21.03.2024 SB2024032137
SB2024041295
SB2024042421
and 18 more
#VU77803 - Incorrect Regular Expression
CVE-2023-36617		 CWE-185 Medium
No
No
 1.1.1-120 29.06.2023 SB2023062931
SB2023071289
SB2023101967
and 13 more
#VU74007 - Incorrect Regular Expression
CVE-2023-28756		 CWE-185 Medium
No
No
 1.1.1-119 24.03.2023 SB2023033146
SB2023050430
SB2023051746
and 33 more
#VU74004 - Incorrect Regular Expression
CVE-2023-28755		 CWE-185 Medium
No
No
 1.1.1-119, 1.1.1-120 24.03.2023 SB2023033146
SB2023042108
SB2023050430
and 41 more
#VU69506 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-33621		 CWE-113 Medium
No
No
 1.1.1-118 22.11.2022 SB2022112239
SB2022112439
SB2023011730
and 31 more
#VU62081 - Type conversion
CVE-2022-28739		 CWE-704 High
No
No
 1.1.1-116 12.04.2022 SB2022041215
SB2022041404
SB2022060704
and 28 more
#VU62080 - Double Free
CVE-2022-28738		 CWE-415 High
No
No
 1.1.1-116 12.04.2022 SB2022041215
SB2022041404
SB2022060704
and 13 more
#VU59824 - Incorrect Regular Expression
CVE-2021-41817		 CWE-185 Medium
No
No
 1.1.1-132 19.01.2022 SB2022011919
SB2022011920
SB2022020413
and 24 more
#VU58365 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-41819		 CWE-451 Medium
No
No
 1.1.1-115 25.11.2021 SB2021112503
SB2022011920
SB2022020413
and 21 more
#VU55489 - Improper Certificate Validation
CVE-2021-32066		 CWE-295 Medium
No
No
 1.1.1-114 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 28 more


Showing elements 1 - 20 out of 25