RubyGems Advisories.

Secure Headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input

• Cross-site scripting (XSS)
• Other injection

<7.3.0 · fixed in 7.3.0

Avo: Direct attachment upload endpoint lacks upload authorization and bypasses field-level upload policy

• Broken access control

>=2.28.0, <3.32.0 · fixed in 3.32.0

Ruby CSS Parser: SSRF and Local File Disclosure in `CssParser::Parser#read_remote_file`

• Server-side request forgery (SSRF)

<3.0.0 · fixed in 3.0.0

pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier

• CWE-208

<=11.6.1 · no fixed version yet

YARD static cache reads raw traversal paths before router sanitization

• Path traversal

<0.9.44 · fixed in 0.9.44

fluent-plugin-opentelemetry Has Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`

• Denial of service
• CWE-409

<0.5.3 · fixed in 0.5.3

fluent-plugin-s3 Vulnerable to Denial of Service (DoS) via Decompression Bomb in `in_s3`

• Denial of service
• CWE-409

>=0.7.0, <1.8.5 · fixed in 1.8.5

Fluentd is Vulnerable to Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`

• Server-side request forgery (SSRF)

<1.19.3 · fixed in 1.19.3

Fluentd is Vulnerable to Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`

• CWE-409

<1.19.3 · fixed in 1.19.3

Fluentd is Vulnerable to Exposure of Sensitive Information via Monitor Agent API

• Information disclosure
• Authentication bypass

<1.19.3 · fixed in 1.19.3

Fluentd is Vulnerable to Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

• Path traversal
• Code injection

<1.19.3 · fixed in 1.19.3

Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

• CWE-414
• CWE-667

<1.3.7 · fixed in 1.3.7

Concurrent Ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity

• CWE-128

<1.3.7 · fixed in 1.3.7

Concurrent Ruby : `AtomicReference#update` livelocks when the stored value is `Float::NAN`

• Denial of service

<1.3.7 · fixed in 1.3.7

Oj: Integer Overflow in Oj.load 2GB String Handling

• Memory corruption

<3.17.3 · fixed in 3.17.3

Oj: Use-After-Free in Oj::Parser SAJ Long Key Callback

• Memory corruption

<3.17.3 · fixed in 3.17.3

Oj: Use-After-Free in Oj::Parser array_class/hash_class GC Marking

• Memory corruption

<3.17.3 · fixed in 3.17.3

Oj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling

• Memory corruption

<3.17.3 · fixed in 3.17.3

Oj: Use-After-Free in Oj::Parser SAJ Callback via Input Mutation

• Memory corruption

<3.17.3 · fixed in 3.17.3

Oj: Use-After-Free in Oj::Doc Iterators via Reentrant Close

• Memory corruption

<3.17.3 · fixed in 3.17.3

Oj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent

• Memory corruption

<3.17.3 · fixed in 3.17.3

Oj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input

• Memory corruption

<3.17.3 · fixed in 3.17.3

Oj: intern.c form_attr (uninitialized stack read)

• Memory corruption

<3.17.3 · fixed in 3.17.3

Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters

• Denial of service

>=1.0.0, <1.10.6 || >=2.0.0, <2.14.3 · fixed in 1.10.6, 2.14.3

Oj: Stack Buffer Overflow in Oj.dump via Large Indent

• Memory corruption

<3.17.3 · fixed in 3.17.3

Oj: Use-After-Free in Oj::Parser Symbol Key Cache Toggle

• Memory corruption

<3.17.2 · fixed in 3.17.2

AlchemyCMS: Unauthenticated nested page API leaks restricted & unpublished content

• Broken access control

<7.4.15 || >=8.0.0.a, <8.0.15 || >=8.1.0, <8.1.14 || >=8.2.0, <8.2.6 · fixed in 7.4.15, 8.0.15, 8.1.14, 8.2.6

Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`

• Memory corruption

<1.19.4 · fixed in 1.19.4

Nokogiri: Possible Use-After-Free in XInclude Processing

• Memory corruption

<1.19.4 · fixed in 1.19.4

Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime

• Memory corruption

<1.19.4 · fixed in 1.19.4

Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

• Memory corruption

<1.19.4 · fixed in 1.19.4

Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`

• Memory corruption

<1.19.4 · fixed in 1.19.4

Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

• Memory corruption

<1.19.4 · fixed in 1.19.4

Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247

• XML external entities (XXE)
• CWE-178

<1.19.4 · fixed in 1.19.4

Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception

• Memory corruption

<1.19.4 · fixed in 1.19.4

Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation

• Broken access control

<3.32.1 || >=4.0.0.beta.1, <4.0.0.beta.51 · fixed in 3.32.1, 4.0.0.beta.51

katello: missing repository authorization in content_uploads exposes cross-product content existence

• Broken access control

<4.21.0.rc1 · fixed in 4.21.0.rc1

Net::IMAP: Command Injection via ID command argument

• Command injection
• Other injection

<0.5.15 || >=0.6.0, <0.6.4.1 · fixed in 0.5.15, 0.6.4.1

Net::IMAP: Denial of Service via incomplete raw argument validation

• CWE-162
• CWE-182

<0.5.15 || >=0.6.0, <0.6.4.1 · fixed in 0.5.15, 0.6.4.1

Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument

• Command injection
• Other injection

<0.5.15 || >=0.6.0, <0.6.4.1 · fixed in 0.5.15, 0.6.4.1

Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections

• Authentication bypass
• CWE-345

>=5.5.0, <7.2.1 || >=8.0.0, <8.0.2 · fixed in 7.2.1, 8.0.2

Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion

• Denial of service

>=5.5.0, <7.2.1 || >=8.0.0, <8.0.2 · fixed in 7.2.1, 8.0.2

Spree: CSV Formula Injection in Customer Export

• Other injection

>=5.2.0, <5.2.8 || >=5.3.0, <5.3.6 || >=5.4.0, <5.4.3 · fixed in 5.2.8, 5.3.6, 5.4.3

Doorkeeper Openid Connect: Dynamic Client Registration feature creates public clients with client_secret

• Authentication bypass

>=1.9.0, <1.10.0 · fixed in 1.10.0

CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters

• Cross-site scripting (XSS)
• CWE-116

<2.2.7 || >=3.0.0.beta, <3.1.3 · fixed in 2.2.7, 3.1.3

ruby-jwt: Empty-key HMAC bypass; cross-language sibling of CVE-2026-44351

• Authentication bypass
• Weak cryptography or TLS

<2.10.3 || >=3.0.0, <3.2.0 · fixed in 2.10.3, 3.2.0

Faraday has a possible incomplete fix for GHSA-33mh-2634-fwr2: protocol-relative URI objects still bypass host scoping

• Server-side request forgery (SSRF)

>=2.0.0, <2.14.2 · fixed in 2.14.2

view_component: System Test Entry Point Path Check Allows Sibling Directory Escape

• Path traversal
• CWE-187

>=3.0.0, <4.9.0 · fixed in 4.9.0

view_component: Preview Route Can Dispatch Inherited Helper Methods

• CWE-277
• CWE-749

>=3.0.0, <4.9.0 · fixed in 4.9.0

Devise has an Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler

• Open redirect

<5.0.4 · fixed in 5.0.4

Sidekiq-cron is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL

• Cross-site scripting (XSS)

<2.4.0 · fixed in 2.4.0

katalyst-koi: Session cookies can be replayed after user logout

• Authentication bypass

<4.20.0 || >=5.0.0, <5.6.0 · fixed in 4.20.0, 5.6.0

CSS Parser: Improper Certificate Validation allows MITM injection of remote CSS content

• Weak cryptography or TLS
• CWE-829

<1.22.0 || >=2.0.0, <2.1.0 · fixed in 1.22.0, 2.1.0

Nokogiri XSLT transform has a memory leak

• Denial of service

<1.19.3 · fixed in 1.19.3

Nokogiri CSS selector tokenizer has regular expression backtracking

• Denial of service

<1.19.3 · fixed in 1.19.3

GraphQL-Ruby's Ruby lexer does not count comment tokens for the purposes of max_query_string_tokens

• Denial of service

>=2.3.1, <2.3.23 || >=2.4.0, <2.4.18 || >=2.5.0, <2.5.26 || >=2.6.0, <2.6.1 · fixed in 2.3.23, 2.4.18, 2.5.26, 2.6.1

net-imap vulnerable to command Injection via "raw" arguments to multiple commands

• Command injection
• Other injection

<0.4.24 || >=0.5.0, <0.5.14 || >=0.6.0, <0.6.4 · fixed in 0.4.24, 0.5.14, 0.6.4

net-imap vulnerable to command Injection via unvalidated Symbol inputs

• Command injection
• Other injection

<0.4.24 || >=0.5.0, <0.5.14 || >=0.6.0, <0.6.4 · fixed in 0.4.24, 0.5.14, 0.6.4

net-imap vulnerable to denial of service via high iteration count for `SCRAM-*` authentication

• Denial of service
• CWE-1322

>=0.4.0, <0.4.24 || >=0.5.0, <0.5.14 || >=0.6.0, <0.6.4 · fixed in 0.4.24, 0.5.14, 0.6.4

net-imap has quadratic complexity when reading response literals

• Denial of service

<0.4.24 || >=0.5.0, <0.5.14 || >=0.6.0, <0.6.4 · fixed in 0.4.24, 0.5.14, 0.6.4