Known vulnerabilities in rubygem-rbs

Known vulnerabilities in rubygem-rbs

Vendor: openEuler

Software: rubygem-rbs

Software CPE: cpe:2.3:o:openeuler:rubygem-rbs:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 19

Public exploits: 1

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU145888 - Resource exhaustion CVE-2026-80212	CWE-400	Medium	No	No	1.4.0-150	27.08.2026	SB2026082726 SB2026090515 SB2026090516 and 12 more
#VU145889 - Improper input validation CVE-2026-80213	CWE-20	Medium	No	No	2.8.2-161	27.08.2026	SB2026082726 SB2026091009 SB2026091025 and 6 more
#VU126646 - Buffer overflow CVE-2026-27820	CWE-120	High	No	No	2.8.2-157	21.04.2026	SB2026042132 SB2026042133 SB2026083029 and 1 more
#VU126644 - Improper Access Control CVE-2026-41316	CWE-284	High	No	No	2.8.2-152	21.04.2026	SB2026042131 SB20260509132 SB2026051815 and 11 more
#VU116663 - Exposure of sensitive information to an unauthorized actor CVE-2025-61594	CWE-200	Medium	No	No	1.4.0-144	07.10.2025	SB2025100723 SB2025110338 SB2025111485 and 4 more
#VU115794 - Resource exhaustion CVE-2025-58767	CWE-400	Low	No	No	1.4.0-144	18.09.2025	SB2025091868 SB2025102434 SB2025110338 and 12 more
#VU114812 - Resource exhaustion CVE-2025-24294	CWE-400	Medium	No	No	2.8.2-157	04.09.2025	SB2025090467 SB2025090470 SB2025090473 and 12 more
#VU112026 - Asymmetric Resource Consumption (Amplification) CVE-2025-25186	CWE-405	Medium	No	No	2.8.2-148	27.06.2025	SB2025062740 SB2025062741 SB2025062742 and 7 more
#VU108125 - Resource exhaustion CVE-2025-43857	CWE-400	Low	No	No	1.4.0-143	02.05.2025	SB2025050219 SB2025061336 SB2025081224 and 1 more
#VU105107 - Inefficient Regular Expression Complexity CVE-2025-27220	CWE-1333	Medium	No	No	1.4.0-142, 2.8.2-149	27.02.2025	SB20250227242 SB2025030761 SB2025031451 and 9 more
#VU105106 - Improper input validation CVE-2025-27219	CWE-20	Medium	No	No	1.4.0-142, 2.8.2-149	27.02.2025	SB20250227242 SB2025030761 SB2025031451 and 15 more
#VU105105 - Exposure of sensitive information to an unauthorized actor CVE-2025-27221	CWE-200	Medium	No	No	1.4.0-142, 1.4.0-144, 2.8.2-149	27.02.2025	SB20250227241 SB2025030761 SB2025031451 and 16 more
#VU96998 - Improper input validation CVE-2024-35221	CWE-20	Medium	No	No	2.8.2-142	10.09.2024	SB2024091055 SB2024091063 SB2024091070 and 4 more
#VU96970 - Resource exhaustion CVE-2024-43398	CWE-400	Medium	No	No	1.4.0-139	10.09.2024	SB2024091006 SB2024091007 SB2024091008 and 28 more
#VU95149 - Improper input validation CVE-2024-41123	CWE-20	Medium	No	No	1.4.0-139	01.08.2024	SB2024080145 SB2024091009 SB2024091607 and 24 more
#VU95148 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') CVE-2024-41946	CWE-776	Medium	No	No	1.4.0-137	01.08.2024	SB2024080145 SB2024082374 SB2024091607 and 22 more
#VU94363 - Improper input validation CVE-2024-39908	CWE-20	Medium	No	No	1.4.0-139	16.07.2024	SB2024071616 SB2024083015 SB2024091009 and 22 more
#VU94361 - Improper input validation CVE-2024-35176	CWE-20	Medium	Available	No	1.4.0-136	16.07.2024	SB2024071615 SB2024071914 SB2024072112 and 19 more
#VU88970 - Out-of-bounds read CVE-2024-27282	CWE-125	Medium	No	No	1.4.0-133	24.04.2024	SB2024042420 SB2024042421 SB2024042450 and 21 more