Known vulnerabilities in rh-ruby27-ruby (Red Hat package)

Known vulnerabilities in rh-ruby27-ruby (Red Hat package)

Vendor: Red Hat Inc.

Software: rh-ruby27-ruby (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:rh-ruby27-ruby_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 13

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU74007 - Incorrect Regular Expression CVE-2023-28756	CWE-185	Medium	No	No	2.7.8-132.el7	24.03.2023	SB2023033146 SB2023050430 SB2023051746 and 33 more
#VU74004 - Incorrect Regular Expression CVE-2023-28755	CWE-185	Medium	No	No	2.7.8-132.el7	24.03.2023	SB2023033146 SB2023042108 SB2023050430 and 41 more
#VU69506 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2021-33621	CWE-113	Medium	No	No	2.7.8-132.el7	22.11.2022	SB2022112239 SB2022112439 SB2023011730 and 31 more
#VU62081 - Type conversion CVE-2022-28739	CWE-704	High	No	No	2.7.6-131.el7	12.04.2022	SB2022041215 SB2022041404 SB2022060704 and 28 more
#VU59824 - Incorrect Regular Expression CVE-2021-41817	CWE-185	Medium	No	No	2.7.6-131.el7	19.01.2022	SB2022011919 SB2022011920 SB2022020413 and 24 more
#VU58365 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2021-41819	CWE-451	Medium	No	No	2.7.6-131.el7	25.11.2021	SB2021112503 SB2022011920 SB2022020413 and 21 more
#VU58364 - Memory corruption CVE-2021-41816	CWE-119	High	No	No	2.7.6-131.el7	25.11.2021	SB2021112503 SB2022011920 SB2022020414 and 7 more
#VU55666 - Insufficient Verification of Data Authenticity CVE-2020-36327	CWE-345	High	No	No	2.7.4-130.el7	09.08.2021	SB2021080910 SB2021080913 SB2021092218 and 21 more
#VU55489 - Improper Certificate Validation CVE-2021-32066	CWE-295	Medium	No	No	2.7.4-130.el7	02.08.2021	SB2021080209 SB2021080210 SB2021080913 and 28 more
#VU55488 - Exposure of sensitive information to an unauthorized actor CVE-2021-31810	CWE-200	Medium	No	No	2.7.4-130.el7	02.08.2021	SB2021080209 SB2021080210 SB2021080913 and 27 more
#VU52796 - Command injection CVE-2021-31799	CWE-77	High	No	No	2.7.4-130.el7	03.05.2021	SB2021050306 SB2021052413 SB2021052414 and 27 more
#VU52000 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-28965	CWE-611	Medium	No	No	2.7.3-129.el7	08.04.2021	SB2021040816 SB2021041365 SB2021042119 and 24 more
#VU47333 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2020-25613	CWE-444	Medium	Available	No	2.7.3-129.el7	05.10.2020	SB2020100509 SB2020100703 SB2020111806 and 21 more