# RubyGems Advisories.

Every RubyGems Advisory we hold (Ruby), newest first.

## Records, newest first (an older page)

- [net-imap vulnerable to STARTTLS stripping via invalid response timing](https://agentprime.io/advisories/GHSA-vcgp-9326-pqcp.md)
  `GHSA-vcgp-9326-pqcp`, `CVE-2026-42246` · RubyGems `net-imap`: affected `<0.3.10 || >=0.4.0, <0.4.24 || >=0.5.0, <0.5.14 || >=0.6.0, <0.6.4`, fixed in `0.3.10`, `0.4.24`, `0.5.14`, `0.6.4` · CVSS 7.6 High · Not analysed yet · Published 4 May 2026 · Tags: CWE-325, CWE-392, CWE-393, CWE-636
- [Avo: Broken Access Control Through Unauthorized Execution of Arbitrary Action Classes Across Resources](https://agentprime.io/advisories/GHSA-qc5p-3mg5-9fh8.md)
  `GHSA-qc5p-3mg5-9fh8`, `CVE-2026-42205` · RubyGems `avo`: affected `<3.31.2`, fixed in `3.31.2` · CVSS 8.8 High · Not analysed yet · Published 24 Apr 2026 · Tags: Broken access control
- [ERB has an @\_init deserialization guard bypass via def_module / def_method / def_class](https://agentprime.io/advisories/GHSA-q339-8rmv-2mhv.md)
  `GHSA-q339-8rmv-2mhv`, `CVE-2026-41316` · RubyGems `erb`: affected `<4.0.3.1 || >=4.0.4, <4.0.4.1 || >=5.0.0, <6.0.1.1 || >=6.0.2, <6.0.4`, fixed in `4.0.3.1`, `4.0.4.1`, `6.0.1.1`, `6.0.4` · CVSS 8.1 High · Not analysed yet · Published 24 Apr 2026 · Tags: Insecure deserialization, CWE-693
- [OpenC3 COSMOS: Permissions Bypass Provides User Access to Unassigned Administrative Actions via Script Runner Tool](https://agentprime.io/advisories/GHSA-2wvh-87g2-89hr.md)
  `GHSA-2wvh-87g2-89hr`, `CVE-2026-42088`, `PYSEC-2026-2245` · RubyGems `openc3`: affected `<7.0.0-rc3`, fixed in `7.0.0-rc3` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Apr 2026 · Tags: Privilege escalation
- [OpenC3 COSMOS has SQL Injection in QuestDB Time-Series Database](https://agentprime.io/advisories/GHSA-v529-vhwc-wfc5.md)
  `GHSA-v529-vhwc-wfc5`, `CVE-2026-42087`, `PYSEC-2026-2244` · RubyGems `openc3`: affected `>=6.7.0, <7.0.0-rc3`, fixed in `7.0.0-rc3` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Apr 2026 · Tags: SQL injection
- [OpenC3 COSMOS is Vulnerable to Self-XSS Through the Command Sender](https://agentprime.io/advisories/GHSA-ffq5-qpvf-xq7x.md)
  `GHSA-ffq5-qpvf-xq7x`, `CVE-2026-42086`, `PYSEC-2026-105` · PyPI `openc3` and 1 more: affected `<7.0.0`, fixed in `7.0.0` · CVSS 4.6 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Cross-site scripting (XSS)
- [OpenC3 COSMOS allows arbitrary writes to plugins directory via path-traversed config filenames](https://agentprime.io/advisories/GHSA-4jvx-93h3-f45h.md)
  `GHSA-4jvx-93h3-f45h`, `CVE-2026-42085`, `PYSEC-2026-2243` · RubyGems `openc3`: affected `<6.10.5 || >=7.0.0.pre.rc1, <7.0.0-rc3`, fixed in `6.10.5`, `7.0.0-rc3` · CVSS 4.3 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Path traversal
- [OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence](https://agentprime.io/advisories/GHSA-wgx6-g857-jjf7.md)
  `GHSA-wgx6-g857-jjf7`, `CVE-2026-42084`, `PYSEC-2026-2242` · RubyGems `openc3`: affected `<6.10.5 || >=7.0.0.pre.rc1, <7.0.0-rc3`, fixed in `6.10.5`, `7.0.0-rc3` · CVSS 8.1 High · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-620
- [yard: Possible arbitrary path traversal and file access via yard server](https://agentprime.io/advisories/GHSA-3jfp-46x4-xgfj.md)
  `GHSA-3jfp-46x4-xgfj`, `CVE-2026-41493` · RubyGems `yard`: affected `<0.9.42`, fixed in `0.9.42` · CVSS 6.9 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Path traversal
- [Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption](https://agentprime.io/advisories/GHSA-g857-hhfv-j68w.md)
  `GHSA-g857-hhfv-j68w`, `CVE-2026-27820` · RubyGems `zlib`: affected `<3.0.1 || >=3.1.0, <3.1.2 || >=3.2.0, <3.2.3`, fixed in `3.0.1`, `3.1.2`, `3.2.3` · CVSS 1.7 Low · Not analysed yet · Published 16 Apr 2026 · Tags: Memory corruption
- [Uncontrolled resource consumption and loop with unreachable exit condition in facil.io and downstream iodine ruby gem](https://agentprime.io/advisories/GHSA-2x79-gwq3-vxxm.md)
  `GHSA-2x79-gwq3-vxxm`, `CVE-2026-41146` · RubyGems `iodine`: affected `<=0.7.58`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 14 Apr 2026 · Tags: Denial of service
- [Decidim amendments can be accepted or rejected by anyone](https://agentprime.io/advisories/GHSA-w5xj-99cg-rccm.md)
  `GHSA-w5xj-99cg-rccm`, `CVE-2026-40869` · RubyGems `decidim-core`: affected `>=0.19.0, <0.30.5 || >=0.31.0.rc1, <0.31.1`, fixed in `0.30.5`, `0.31.1` · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2026 · Tags: Privilege escalation
- [Fat Free CRM has BOLA in DELETE /emails/:id - Any authenticated user can hit this endpoint and delete emails by ID](https://agentprime.io/advisories/GHSA-9pm8-vwc5-w2hm.md)
  `GHSA-9pm8-vwc5-w2hm` · RubyGems `fat_free_crm`: affected `<0.26.0`, fixed in `0.26.0` · CVSS 4.0, no score published · Not analysed yet · Published 14 Apr 2026 · Tags: Broken access control
- [Decidim has a cross-site scripting (XSS) in user name](https://agentprime.io/advisories/GHSA-fc46-r95f-hq7g.md)
  `GHSA-fc46-r95f-hq7g`, `CVE-2026-23891` · RubyGems `decidim-core`: affected `<0.30.5 || >=0.31.0.rc1, <0.31.1`, fixed in `0.30.5`, `0.31.1` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Apr 2026 · Tags: Cross-site scripting (XSS)
- [bsv-sdk ARC broadcaster treats INVALID/MALFORMED/ORPHAN responses as successful broadcasts](https://agentprime.io/advisories/GHSA-9hfr-gw99-8rhx.md)
  `GHSA-9hfr-gw99-8rhx`, `CVE-2026-40069` · RubyGems `bsv-sdk`: affected `>=0.1.0, <0.8.2`, fixed in `0.8.2` · CVSS 7.5 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-754
- [bsv-sdk and bsv-wallet persist unverified certifier signatures in acquire_certificate (direct and issuance paths)](https://agentprime.io/advisories/GHSA-hc36-c89j-5f4j.md)
  `GHSA-hc36-c89j-5f4j`, `CVE-2026-40070` · RubyGems `bsv-sdk` and 1 more: affected `>=0.3.1, <0.8.2`, fixed in `0.8.2` · CVSS 8.1 High · Not analysed yet · Published 9 Apr 2026 · Tags: Weak cryptography or TLS
- [Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization](https://agentprime.io/advisories/GHSA-33qg-7wpp-89cq.md)
  `GHSA-33qg-7wpp-89cq`, `CVE-2026-39324` · RubyGems `rack-session`: affected `>=2.0.0, <2.1.2`, fixed in `2.1.2` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Apr 2026 · Tags: Authentication bypass, Insecure deserialization, CWE-345, CWE-565
- [Addressable has a Regular Expression Denial of Service in Addressable templates](https://agentprime.io/advisories/GHSA-h27x-rffw-24p4.md)
  `GHSA-h27x-rffw-24p4`, `CVE-2026-35611` · RubyGems `addressable`: affected `>=2.3.0, <2.9.0`, fixed in `2.9.0` · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2026 · Tags: Denial of service
- [rdiscount has an Out-of-bounds Read](https://agentprime.io/advisories/GHSA-6r34-94wq-jhrc.md)
  `GHSA-6r34-94wq-jhrc`, `CVE-2026-35201` · RubyGems `rdiscount`: affected `>=1.3.1.1, <2.2.7.4`, fixed in `2.2.7.4` · CVSS 5.9 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Memory corruption
- [Rack::Request accepts invalid Host characters, enabling host allowlist bypass](https://agentprime.io/advisories/GHSA-g2pf-xv49-m2h5.md)
  `GHSA-g2pf-xv49-m2h5`, `CVE-2026-34835` · RubyGems `rack`: affected `>=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `3.1.21`, `3.2.6` · CVSS 4.8 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-1286
- [Rack has Content-Length mismatch in Rack::Files error responses](https://agentprime.io/advisories/GHSA-q2ww-5357-x388.md)
  `GHSA-q2ww-5357-x388`, `CVE-2026-34831` · RubyGems `rack`: affected `<2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `2.2.23`, `3.1.21`, `3.2.6` · CVSS 4.8 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-130, CWE-135
- [Rack::Sendfile header-based X-Accel-Mapping regex injection enables unauthorized X-Accel-Redirect](https://agentprime.io/advisories/GHSA-qv7j-4883-hwh7.md)
  `GHSA-qv7j-4883-hwh7`, `CVE-2026-34830` · RubyGems `rack`: affected `<2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `2.2.23`, `3.1.21`, `3.2.6` · CVSS 5.9 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-625
- [Rack's multipart parsing without Content-Length header allows unbounded chunked file uploads](https://agentprime.io/advisories/GHSA-8vqr-qjwx-82mw.md)
  `GHSA-8vqr-qjwx-82mw`, `CVE-2026-34829` · RubyGems `rack`: affected `<2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `2.2.23`, `3.1.21`, `3.2.6` · CVSS 7.5 High · Not analysed yet · Published 2 Apr 2026 · Tags: Denial of service
- [Rack has a root directory disclosure via unescaped regex interpolation in Rack::Directory](https://agentprime.io/advisories/GHSA-7mqq-6cf9-v2qp.md)
  `GHSA-7mqq-6cf9-v2qp`, `CVE-2026-34763` · RubyGems `rack`: affected `<2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `2.2.23`, `3.1.21`, `3.2.6` · CVSS 5.3 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-625
- [Rack has quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header](https://agentprime.io/advisories/GHSA-v569-hp3g-36wr.md)
  `GHSA-v569-hp3g-36wr`, `CVE-2026-34230` · RubyGems `rack`: affected `<2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `2.2.23`, `3.1.21`, `3.2.6` · CVSS 5.3 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: Denial of service
- [Rack: Forwarded Header semicolon injection enables Host and Scheme spoofing](https://agentprime.io/advisories/GHSA-qfgr-crr9-7r49.md)
  `GHSA-qfgr-crr9-7r49`, `CVE-2026-32762` · RubyGems `rack`: affected `>=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `3.1.21`, `3.2.6` · CVSS 4.8 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-436
- [Rack's improper unfolding of folded multipart headers preserves CRLF in parsed parameter values](https://agentprime.io/advisories/GHSA-rx22-g9mx-qrhv.md)
  `GHSA-rx22-g9mx-qrhv`, `CVE-2026-26962` · RubyGems `rack`: affected `>=3.2.0, <3.2.6`, fixed in `3.2.6` · CVSS 4.8 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: Other injection
- [Rack's greedy multipart boundary parsing can cause parser differentials and WAF bypass.](https://agentprime.io/advisories/GHSA-vgpv-f759-9wx3.md)
  `GHSA-vgpv-f759-9wx3`, `CVE-2026-26961` · RubyGems `rack`: affected `<2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `2.2.23`, `3.1.21`, `3.2.6` · CVSS 3.7 Low · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-436
- [Rack's multipart header parsing allows Denial of Service via escape-heavy quoted parameters](https://agentprime.io/advisories/GHSA-v6x5-cg8r-vv6x.md)
  `GHSA-v6x5-cg8r-vv6x`, `CVE-2026-34827` · RubyGems `rack`: affected `>=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `3.1.21`, `3.2.6` · CVSS 7.5 High · Not analysed yet · Published 2 Apr 2026 · Tags: Denial of service
- [Rack's multipart byte range processing allows denial of service via excessive overlapping ranges](https://agentprime.io/advisories/GHSA-x8cg-fq8g-mxfx.md)
  `GHSA-x8cg-fq8g-mxfx`, `CVE-2026-34826` · RubyGems `rack`: affected `<2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `2.2.23`, `3.1.21`, `3.2.6` · CVSS 5.3 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: Denial of service
- [Rack:: Static header_rules bypass via URL-encoded paths](https://agentprime.io/advisories/GHSA-q4qf-9j86-f5mh.md)
  `GHSA-q4qf-9j86-f5mh`, `CVE-2026-34786` · RubyGems `rack`: affected `<2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `2.2.23`, `3.1.21`, `3.2.6` · CVSS 5.3 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-180
- [Rack::Static prefix matching can expose unintended files under the static root](https://agentprime.io/advisories/GHSA-h2jq-g4cq-5ppq.md)
  `GHSA-h2jq-g4cq-5ppq`, `CVE-2026-34785` · RubyGems `rack`: affected `<2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `2.2.23`, `3.1.21`, `3.2.6` · CVSS 7.5 High · Not analysed yet · Published 2 Apr 2026 · Tags: Information disclosure, CWE-187
- [Trix is vulnerable to XSS through JSON deserialization bypass in drag-and-drop (Level0InputController)](https://agentprime.io/advisories/GHSA-53p3-c7vp-4mcc.md)
  `GHSA-53p3-c7vp-4mcc`, `CVE-2026-73427` · npm `trix` and 1 more: affected `<2.1.18`, fixed in `2.1.18` · CVSS 2.1 Low · Not analysed yet · Published 29 Mar 2026 · Tags: Cross-site scripting (XSS)
- [Ruby LSP has arbitrary code execution through branch setting](https://agentprime.io/advisories/GHSA-c4r5-fxqw-vh93.md)
  `GHSA-c4r5-fxqw-vh93`, `CVE-2026-34060` · RubyGems `ruby-lsp`: affected `<0.26.9`, fixed in `0.26.9` · CVSS 7.1 High · Not analysed yet · Published 27 Mar 2026 · Tags: Code injection
- [MCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replay](https://agentprime.io/advisories/GHSA-qvqr-5cv7-wh35.md)
  `GHSA-qvqr-5cv7-wh35`, `CVE-2026-33946` · RubyGems `mcp`: affected `<0.9.2`, fixed in `0.9.2` · CVSS 8.2 High · Not analysed yet · Published 27 Mar 2026 · Tags: Authentication bypass, Broken access control
- [Loofah has improper detection of disallowed URIs via \`allowed_uri?\`](https://agentprime.io/advisories/GHSA-2j22-pr5w-6gq8.md)
  `GHSA-2j22-pr5w-6gq8` · RubyGems `loofah`: affected `>=2.25.0, <2.25.1`, fixed in `2.25.1` · CVSS 4.0, no score published · Not analysed yet · Published 26 Mar 2026 · Tags: Cross-site scripting (XSS), CWE-116
- [Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests](https://agentprime.io/advisories/GHSA-p9fm-f462-ggrg.md)
  `GHSA-p9fm-f462-ggrg`, `CVE-2026-33658` · RubyGems `activestorage`: affected `<7.2.3.1 || >=8.0.0, <8.0.4.1 || >=8.1.0, <8.1.2.1`, fixed in `7.2.3.1`, `8.0.4.1`, `8.1.2.1` · CVSS 2.3 Low · Not analysed yet · Published 25 Mar 2026 · Tags: Denial of service
- [iCalendar has ICS injection via unsanitized URI property values](https://agentprime.io/advisories/GHSA-pv9c-9mfh-hvxq.md)
  `GHSA-pv9c-9mfh-hvxq`, `CVE-2026-33635` · RubyGems `icalendar`: affected `>=2.0.0, <2.12.2`, fixed in `2.12.2` · CVSS 4.3 Medium · Not analysed yet · Published 24 Mar 2026 · Tags: Other injection
- [Rails Active Storage has possible glob injection in its DiskService](https://agentprime.io/advisories/GHSA-73f9-jhhh-hr5m.md)
  `GHSA-73f9-jhhh-hr5m`, `CVE-2026-33202` · RubyGems `activestorage`: affected `<7.2.3.1 || >=8.0.0.beta1, <8.0.4.1 || >=8.1.0.beta1, <8.1.2.1`, fixed in `7.2.3.1`, `8.0.4.1`, `8.1.2.1` · CVSS 6.6 Medium · Not analysed yet · Published 23 Mar 2026 · Tags: Other injection
- [Rails Active Storage has possible Path Traversal in DiskService](https://agentprime.io/advisories/GHSA-9xrj-h377-fr87.md)
  `GHSA-9xrj-h377-fr87`, `CVE-2026-33195` · RubyGems `activestorage`: affected `<7.2.3.1 || >=8.0.0.beta1, <8.0.4.1 || >=8.1.0.beta1, <8.1.2.1`, fixed in `7.2.3.1`, `8.0.4.1`, `8.1.2.1` · CVSS 8.0 High · Not analysed yet · Published 23 Mar 2026 · Tags: Path traversal
- [Rails Active Support has a possible DoS vulnerability in its number helpers](https://agentprime.io/advisories/GHSA-2j26-frm8-cmj9.md)
  `GHSA-2j26-frm8-cmj9`, `CVE-2026-33176` · RubyGems `activesupport`: affected `<7.2.3.1 || >=8.0.0.beta1, <8.0.4.1 || >=8.1.0.beta1, <8.1.2.1`, fixed in `7.2.3.1`, `8.0.4.1`, `8.1.2.1` · CVSS 6.6 Medium · Not analysed yet · Published 23 Mar 2026 · Tags: Denial of service
- [Rails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests](https://agentprime.io/advisories/GHSA-r46p-8f7g-vvvg.md)
  `GHSA-r46p-8f7g-vvvg`, `CVE-2026-33174` · RubyGems `activestorage`: affected `<7.2.3.1 || >=8.0.0.beta1, <8.0.4.1 || >=8.1.0.beta1, <8.1.2.1`, fixed in `7.2.3.1`, `8.0.4.1`, `8.1.2.1` · CVSS 6.6 Medium · Not analysed yet · Published 23 Mar 2026 · Tags: Denial of service
- [Rails Active Storage has possible content type bypass via metadata in direct uploads](https://agentprime.io/advisories/GHSA-qcfx-2mfw-w4cg.md)
  `GHSA-qcfx-2mfw-w4cg`, `CVE-2026-33173` · RubyGems `activestorage`: affected `<7.2.3.1 || >=8.0.0.beta1, <8.0.4.1 || >=8.1.0.beta1, <8.1.2.1`, fixed in `7.2.3.1`, `8.0.4.1`, `8.1.2.1` · CVSS 5.3 Medium · Not analysed yet · Published 23 Mar 2026 · Tags: CWE-925
- [Rails Active Support has a possible XSS vulnerability in SafeBuffer#%](https://agentprime.io/advisories/GHSA-89vf-4333-qx8v.md)
  `GHSA-89vf-4333-qx8v`, `CVE-2026-33170` · RubyGems `activesupport`: affected `<7.2.3.1 || >=8.0.0.beta1, <8.0.4.1 || >=8.1.0.beta1, <8.1.2.1`, fixed in `7.2.3.1`, `8.0.4.1`, `8.1.2.1` · CVSS 5.3 Medium · Not analysed yet · Published 23 Mar 2026 · Tags: Cross-site scripting (XSS)
- [Rails Active Support has a possible ReDoS vulnerability in number_to_delimited](https://agentprime.io/advisories/GHSA-cg4j-q9v8-6v38.md)
  `GHSA-cg4j-q9v8-6v38`, `CVE-2026-33169` · RubyGems `activesupport`: affected `<7.2.3.1 || >=8.0.0.beta1, <8.0.4.1 || >=8.1.0.beta1, <8.1.2.1`, fixed in `7.2.3.1`, `8.0.4.1`, `8.1.2.1` · CVSS 6.9 Medium · Not analysed yet · Published 23 Mar 2026 · Tags: Denial of service
- [Rails has a possible XSS vulnerability in its Action View tag helpers](https://agentprime.io/advisories/GHSA-v55j-83pf-r9cq.md)
  `GHSA-v55j-83pf-r9cq`, `CVE-2026-33168` · RubyGems `actionview`: affected `<7.2.3.1 || >=8.0.0.beta1, <8.0.4.1 || >=8.1.0.beta1, <8.1.2.1`, fixed in `7.2.3.1`, `8.0.4.1`, `8.1.2.1` · CVSS 2.3 Low · Not analysed yet · Published 23 Mar 2026 · Tags: Cross-site scripting (XSS)
- [Rails has a possible XSS vulnerability in its Action Pack debug exceptions](https://agentprime.io/advisories/GHSA-pgm4-439c-5jp6.md)
  `GHSA-pgm4-439c-5jp6`, `CVE-2026-33167` · RubyGems `actionpack`: affected `>=8.1.0, <8.1.2.1`, fixed in `8.1.2.1` · CVSS 1.3 Low · Not analysed yet · Published 23 Mar 2026 · Tags: Cross-site scripting (XSS)
- [Graphiti Affected by Arbitrary Method Execution via Unvalidated Relationship Names](https://agentprime.io/advisories/GHSA-3m5v-4xp5-gjg2.md)
  `GHSA-3m5v-4xp5-gjg2`, `CVE-2026-33286` · RubyGems `graphiti`: affected `<1.10.2`, fixed in `1.10.2` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-913
- [bcrypt-ruby has an Integer Overflow that Causes Zero Key-Strengthening Iterations at Cost=31 on JRuby](https://agentprime.io/advisories/GHSA-f27w-vcwj-c954.md)
  `GHSA-f27w-vcwj-c954`, `CVE-2026-33306` · RubyGems `bcrypt`: affected `<3.1.22`, fixed in `3.1.22` · CVSS 4.5 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption
- [Ruby JSON has a format string injection vulnerability](https://agentprime.io/advisories/GHSA-3m6g-2423-7cp3.md)
  `GHSA-3m6g-2423-7cp3`, `CVE-2026-33210` · RubyGems `json`: affected `>=2.14.0, <2.15.2.1 || >=2.16.0, <2.17.1.2 || >=2.18.0, <2.19.2`, fixed in `2.15.2.1`, `2.17.1.2`, `2.19.2` · CVSS 8.3 High · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption
- [Avo has a XSS vulnerability on \`return_to\` param](https://agentprime.io/advisories/GHSA-762r-27w2-q22j.md)
  `GHSA-762r-27w2-q22j`, `CVE-2026-33209` · RubyGems `avo`: affected `<3.30.3`, fixed in `3.30.3` · CVSS 5.3 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Cross-site scripting (XSS)
- [Improper detection of disallowed URIs by Loofah \`allowed_uri?\`](https://agentprime.io/advisories/GHSA-46fp-8f5p-pf2m.md)
  `GHSA-46fp-8f5p-pf2m` · RubyGems `loofah`: affected `>=2.25.0, <2.25.1`, fixed in `2.25.1` · CVSS 4.0, no score published · Not analysed yet · Published 18 Mar 2026 · Tags: Cross-site scripting (XSS)
- [Devise has a confirmable "change email" race condition permits user to confirm email they have no access to](https://agentprime.io/advisories/GHSA-57hq-95w6-v4fc.md)
  `GHSA-57hq-95w6-v4fc`, `CVE-2026-32700` · RubyGems `devise`: affected `<5.0.3`, fixed in `5.0.3` · CVSS 6.0 Medium · Not analysed yet · Published 17 Mar 2026 · Tags: Race condition
- [Katello: Denial of Service and potential information disclosure via SQL injection](https://agentprime.io/advisories/GHSA-fwj4-6wgp-mpxm.md)
  `GHSA-fwj4-6wgp-mpxm`, `CVE-2026-4324` · RubyGems `katello`: affected `<4.19.1`, fixed in `4.19.1` · CVSS 5.4 Medium · Not analysed yet · Published 17 Mar 2026 · Tags: SQL injection
- [Trix has a Stored XSS vulnerability through serialized attributes](https://agentprime.io/advisories/GHSA-qmpg-8xg6-ph5q.md)
  `GHSA-qmpg-8xg6-ph5q`, `CVE-2026-73426` · npm `trix` and 1 more: affected `<2.1.17`, fixed in `2.1.17` · CVSS 4.6 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: Cross-site scripting (XSS)
- [sigstore-ruby verifier returns success for DSSE bundles with mismatched in-toto subject digest](https://agentprime.io/advisories/GHSA-mhg6-2q2v-9h2c.md)
  `GHSA-mhg6-2q2v-9h2c`, `CVE-2026-31830` · RubyGems `sigstore`: affected `<0.2.3`, fixed in `0.2.3` · CVSS 7.5 High · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-252
- [Camaleon CMS vulnerable to Path Traversal through AWS S3 uploader implementation](https://agentprime.io/advisories/GHSA-jw5g-f64p-6x78.md)
  `GHSA-jw5g-f64p-6x78`, `CVE-2026-1776` · RubyGems `camaleon_cms`: affected `>=2.4.5.0, <=2.9.1`, no fixed version yet · CVSS 6.0 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Path traversal
- [rubyipmi is vulnerable to OS Command Injection through malicious usernames](https://agentprime.io/advisories/GHSA-hfcp-477w-3wjw.md)
  `GHSA-hfcp-477w-3wjw`, `CVE-2026-0980` · RubyGems `rubyipmi`: affected `<0.13.0`, fixed in `0.13.0` · CVSS 8.3 High · Not analysed yet · Published 27 Feb 2026 · Tags: Command injection
- [Nokogiri does not check the return value from xmlC14NExecute](https://agentprime.io/advisories/GHSA-wx95-c6cv-8532.md)
  `GHSA-wx95-c6cv-8532`, `CVE-2026-79772` · RubyGems `nokogiri`: affected `>=1.5.1, <1.19.1`, fixed in `1.19.1` · CVSS 6.9 Medium · Not analysed yet · Published 18 Feb 2026 · Tags: CWE-252
- [Stored XSS in Rack::Directory via javascript: filenames rendered into anchor href](https://agentprime.io/advisories/GHSA-whrj-4476-wvmp.md)
  `GHSA-whrj-4476-wvmp`, `CVE-2026-25500` · RubyGems `rack`: affected `<2.2.22 || >=3.0.0.beta1, <3.1.20 || >=3.2.0, <3.2.5`, fixed in `2.2.22`, `3.1.20`, `3.2.5` · CVSS 5.4 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: Cross-site scripting (XSS)

Newest: <https://agentprime.io/advisories/ecosystem/rubygems.md>
Older: <https://agentprime.io/advisories/ecosystem/rubygems.md?cursor=WyIyMDI2LTAyLTE3VDE4OjQ2OjM1LjAwMDAwMFoiLCJHSFNBLXdocmotNDQ3Ni13dm1wIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?ecosystem=RubyGems&cursor=WyIyMDI2LTA1LTA0VDIyOjAyOjU2LjAwMDAwMFoiLCJHSFNBLXEybXctZnZqOS12dmN3Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/ecosystem/rubygems/?cursor=WyIyMDI2LTA1LTA0VDIyOjAyOjU2LjAwMDAwMFoiLCJHSFNBLXEybXctZnZqOS12dmN3Il0>. Everything for agents: <https://agentprime.io/llms.txt>.