RubyGems Advisories.

Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps

• Broken access control

>=22.1.0, <23.0.3 · fixed in 23.0.3

Crass: Non-ASCII characters cause superlinear CPU consumption

• Denial of service

<1.0.7 · fixed in 1.0.7

Crass: A large number of adjacent CSS comments can trigger a SystemStackError

• Denial of service

<1.0.7 · fixed in 1.0.7

Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage

• Denial of service

<1.0.7 · fixed in 1.0.7

Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass

• CWE-436

<1.0.8 · fixed in 1.0.8

Crass : Large numeric exponents cause CPU and memory denial of service

• Denial of service

<1.0.7 · fixed in 1.0.7

Mechanize sends credential headers to another origin after a meta refresh

• Information disclosure
• Hard-coded credentials

<2.14.1 · fixed in 2.14.1

Mechanize sends credential headers to another host after an HTTP redirect

• Information disclosure
• Hard-coded credentials

<2.14.1 · fixed in 2.14.1

sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array

• Memory corruption

>=1.4.0, <2.9.6 · fixed in 2.9.6

OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)

• Code injection

>=5.1.0, <7.3.0 · fixed in 7.3.0

OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting

• Command injection

>=5.12.0, <7.3.0 · fixed in 7.3.0

Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR)

• Broken access control

>=5.4.0, <5.4.4 || >=5.5.0, <5.5.4 · fixed in 5.4.4, 5.5.4

MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

• Path traversal

>=7.3.0, <16.5.0 · fixed in 16.5.0

MPXJ: XXE Vulnerability in MerlinReader

• XML external entities (XXE)

>=5.5.5, <16.4.1 · fixed in 16.4.1

decidim-elections: Election question titles allow stored script execution

• Cross-site scripting (XSS)

<0.32.0 · fixed in 0.32.0

rubyzip path traversal vulnerability

• Path traversal

<3.4.0 · fixed in 3.4.0

Mail: Email address spoofing via malformed RFC 2047 encoded-words

• CWE-436

<2.9.1 · fixed in 2.9.1

Duplicate Advisory: Nokogiri does not check the return value from xmlC14NExecute

• CWE-252

>=1.5.1 · no fixed version yet

Duplicate Advisory: Nokogiri XSLT transform has a memory leak

• Denial of service

* · no fixed version yet

Duplicate Advisory: Nokogiri CSS selector tokenizer has regular expression backtracking

• Denial of service

* · no fixed version yet

kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)

• Code injection

>=0.1.0, <0.9.1 · fixed in 0.9.1

Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams

• Memory corruption

>=2.20.0, <2.21.2 · fixed in 2.21.2

guard-livereload has a directory traversal vulnerability

• Path traversal

<2.5.2 · fixed in 2.5.2

Savon::Model evaluates WSDL operation names as Ruby source

• Code injection

>=0.9.8, <2.17.2 · fixed in 2.17.2

Active Storage has possible arbitrary file read and remote code execution in Active Storage variant processing

• CWE-1188

<7.2.3.2 || >=8.0.0.beta1, <8.0.5.1 || >=8.1.0.beta1, <8.1.3.1 · fixed in 7.2.3.2, 8.0.5.1, 8.1.3.1

MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure

• Memory corruption

<1.8.2 · fixed in 1.8.2

MCP Ruby SDK: Ruby SSE Session Poisoning

• Broken access control

<0.23.0 · fixed in 0.23.0

MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport

• Denial of service

<0.23.0 · fixed in 0.23.0

MCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize flood

• Denial of service

<0.23.0 · fixed in 0.23.0

MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)

• Denial of service

<0.23.0 · fixed in 0.23.0

MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protection

• CWE-346
• CWE-350

<0.23.0 · fixed in 0.23.0

ActiveRecord::Tenanted::Storage::DiskService#path_for has a possible path traversal

• Path traversal

<0.7.0 · fixed in 0.7.0

Pagy I18n locale option is not validated before being used in a file path

• Path traversal
• Information disclosure

>=43.0.0, <43.5.6 · fixed in 43.5.6

OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host

• Information disclosure
• Open redirect

>=0.4.0, <2.0.22 · fixed in 2.0.22

OAuth: Cross-origin token-request redirects can expose signed request metadata

• Information disclosure
• Server-side request forgery (SSRF)

>=0.5.5, <1.1.6 · fixed in 1.1.6

sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks

• Memory corruption

>=2.1.0, <2.9.5 · fixed in 2.9.5

sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity

• Memory corruption

<2.9.5 · fixed in 2.9.5

Trix: Stored XSS via HTMLParser attribute injection on paste

• Cross-site scripting (XSS)

<2.1.18 · fixed in 2.1.18

Ruby json: JSON generator heap buffer overflow when streaming to an IO

• Memory corruption

>=2.9.0, <2.19.9 · fixed in 2.19.9

Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations

• Cross-site scripting (XSS)

>=1.0.3, <1.7.1 · fixed in 1.7.1

Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons

• Cross-site scripting (XSS)
• CWE-184

>=2.25.0, <2.25.2 · fixed in 2.25.2

Loofah: SVG `href` attribute bypasses local-reference restriction

• Cross-site scripting (XSS)

<2.25.2 · fixed in 2.25.2

websocket-driver-ruby: Denial of service via malformed Host header

• CWE-248

<0.8.2 · fixed in 0.8.2

Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references

• CWE-184

>=2.25.0, <2.25.2 · fixed in 2.25.2

dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS

• Denial of service

<2.32.0 · fixed in 2.32.0

ViewComponent: Reused Component Instances Retain Stale Render Context

• Race condition
• Information disclosure

>=4.0.0, <4.12.0 · fixed in 4.12.0

ViewComponent: around_render HTML-Safety Bypass

• Cross-site scripting (XSS)

>=4.0.0, <4.12.0 · fixed in 4.12.0

websocket-driver: Memory exhaustion in HTTP header parser

• Denial of service

<0.8.1 · fixed in 0.8.1

websocket-driver: Resource limit bypass via message compression

• Denial of service

<0.8.1 · fixed in 0.8.1

websocket-driver: Memory exhaustion via abuse of protocol length headers

• Denial of service

<0.8.1 · fixed in 0.8.1

Decidim: Push subscriptions can be abused for server-side requests

• Server-side request forgery (SSRF)

<0.30.9 || >=0.31.0.rc1, <0.31.5 || >=0.32.0.rc1, <0.32.0 · fixed in 0.30.9, 0.31.5, 0.32.0

Decidim: HTML content blocks allow stored script execution

• Code injection

<0.30.9 || >=0.31.0.rc1, <0.31.5 || >=0.32.0.rc1, <0.32.0 · fixed in 0.30.9, 0.31.5, 0.32.0

Decidim: CSV census record endpoints improper authorization

• Broken access control

<0.30.9 || >=0.31.0.rc1, <0.31.5 || >=0.32.0.rc1, <0.32.0 · fixed in 0.30.9, 0.31.5, 0.32.0

Decidim: JWT-backed authentication can be replayed across organizations

• Authentication bypass
• Broken access control

<0.31.5 || >=0.32.0.rc1, <0.32.0 · fixed in 0.31.5, 0.32.0

Decidim: Verification documents can be downloaded through reusable links

• Information disclosure

<0.30.9 || >=0.31.0.rc1, <0.31.5 || >=0.32.0.rc1, <0.32.0 · fixed in 0.30.9, 0.31.5, 0.32.0

Decidim: Private exports can be downloaded through reusable links

• Information disclosure
• Broken access control

<0.30.9 || >=0.31.0.rc1, <0.31.5 || >=0.32.0.rc1, <0.32.0 · fixed in 0.30.9, 0.31.5, 0.32.0

Decidim: Admin user search allows SQL injection through similarity-based sorting

• SQL injection

<0.30.9 || >=0.31.0.rc1, <0.31.5 || >=0.32.0.rc1, <0.32.0 · fixed in 0.30.9, 0.31.5, 0.32.0

Decidim: Verification admins can access supplied IDs from other organizations

• Information disclosure
• Broken access control

<0.30.9 || >=0.31.0.rc1, <0.31.5 || >=0.32.0.rc1, <0.32.0 · fixed in 0.30.9, 0.31.5, 0.32.0

Decidim: Forms admin question editor lacks authorization

• Broken access control

>=0.31.0, <0.31.5 || >=0.32.0.rc1, <0.32.0 · fixed in 0.31.5, 0.32.0

Excon does not redact additional sensitive/risky headers when following redirects

• Information disclosure
• Hard-coded credentials

<1.5.0 · fixed in 1.5.0