{"items":[{"id":"CVE-2026-80213","published":"2026-08-27T14:22:23.495Z","updated":"2026-08-27T17:52:14.240Z","title":"An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking…","severity":"MEDIUM","score":4,"vendor":"Ruby","product":"resolv","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2026-80212","published":"2026-08-27T14:15:04.403Z","updated":"2026-08-27T19:33:58.773Z","title":"An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class, Resolv::DNS::Resource::Generic.create, and…","severity":"HIGH","score":7.5,"vendor":"Ruby","product":"resolv","kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2026-71847","published":"2026-08-07T18:31:28.507Z","updated":"2026-08-07T21:02:06.463Z","title":"Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams","severity":"HIGH","score":8.7,"vendor":"ruby","product":"json","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2026-54696","published":"2026-06-30T22:05:48.347Z","updated":"2026-07-01T13:20:56.931Z","title":"Ruby JSON: JSON generator heap buffer overflow when streaming to an IO","severity":"LOW","score":3.7,"vendor":"ruby","product":"json","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2026-47242","published":"2026-06-22T20:19:41.222Z","updated":"2026-06-23T12:06:49.157Z","title":"Net::IMAP: Command Injection via ID command argument","severity":"MEDIUM","score":5.8,"vendor":"ruby","product":"net-imap","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2026-47240","published":"2026-06-22T20:17:15.376Z","updated":"2026-06-23T15:06:33.819Z","title":"Net::IMAP: Command Injection via non-synchronizing literal in \"raw\" argument","severity":"MEDIUM","score":5.8,"vendor":"ruby","product":"net-imap","kev":false,"epss":0.00831,"kevAdded":null},{"id":"CVE-2026-47241","published":"2026-06-22T20:11:04.329Z","updated":"2026-06-23T14:16:32.846Z","title":"Net::IMAP: Denial of Service via incomplete raw argument validation","severity":"LOW","score":2.1,"vendor":"ruby","product":"net-imap","kev":false,"epss":0.00382,"kevAdded":null},{"id":"CVE-2026-42258","published":"2026-05-09T19:40:49.405Z","updated":"2026-09-01T12:04:48.054Z","title":"net-imap: Command Injection via unvalidated Symbol inputs","severity":"MEDIUM","score":5.8,"vendor":"ruby","product":"net-imap","kev":false,"epss":0.00783,"kevAdded":null},{"id":"CVE-2026-42257","published":"2026-05-09T19:39:48.398Z","updated":"2026-05-13T19:33:13.948Z","title":"net-imap: Command Injection via \"raw\" arguments to multiple commands","severity":"MEDIUM","score":5.8,"vendor":"ruby","product":"net-imap","kev":false,"epss":0.00429,"kevAdded":null},{"id":"CVE-2026-42256","published":"2026-05-09T19:38:33.106Z","updated":"2026-05-11T17:04:42.562Z","title":"net-imap: Denial of service via high iteration count for `SCRAM-*` authentication","severity":"MEDIUM","score":6,"vendor":"ruby","product":"net-imap","kev":false,"epss":0.00299,"kevAdded":null},{"id":"CVE-2026-42245","published":"2026-05-09T19:37:08.905Z","updated":"2026-05-12T18:30:58.415Z","title":"net-imap: Quadratic complexity when reading response literals","severity":"LOW","score":2.3,"vendor":"ruby","product":"net-imap","kev":false,"epss":0.0041,"kevAdded":null},{"id":"CVE-2026-42246","published":"2026-05-09T19:33:17.880Z","updated":"2026-08-24T12:06:55.143Z","title":"net-imap vulnerable to STARTTLS stripping via invalid response timing","severity":"HIGH","score":7.6,"vendor":"ruby","product":"net-imap","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2026-41316","published":"2026-04-24T02:35:41.160Z","updated":"2026-08-24T12:06:46.132Z","title":"ERB has an @_init deserialization guard bypass via def_module / def_method / def_class","severity":"HIGH","score":8.1,"vendor":"ruby","product":"erb","kev":false,"epss":0.01131,"kevAdded":null},{"id":"CVE-2026-27820","published":"2026-04-16T17:27:48.944Z","updated":"2026-04-16T18:20:21.451Z","title":"zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption","severity":"LOW","score":1.7,"vendor":"ruby","product":"zlib","kev":false,"epss":0.00561,"kevAdded":null},{"id":"CVE-2026-33210","published":"2026-03-20T22:57:08.758Z","updated":"2026-08-21T12:13:00.837Z","title":"Ruby JSON has a format string injection vulnerability","severity":"HIGH","score":8.3,"vendor":"ruby","product":"json","kev":false,"epss":0.00872,"kevAdded":null},{"id":"CVE-2025-61594","published":"2025-12-30T21:03:08.990Z","updated":"2026-04-16T17:02:32.149Z","title":"URI Credential Leakage Bypass over CVE-2025-27221","severity":"LOW","score":2.1,"vendor":"ruby","product":"uri","kev":false,"epss":0.0056,"kevAdded":null},{"id":"CVE-2025-58767","published":"2025-09-17T17:45:58.118Z","updated":"2025-09-17T17:54:00.334Z","title":"REXML has a DoS condition when parsing malformed XML file","severity":"LOW","score":1.2,"vendor":"ruby","product":"rexml","kev":false,"epss":0.0025,"kevAdded":null},{"id":"CVE-2025-24294","published":"2025-07-12T03:30:40.226Z","updated":"2025-07-16T13:37:43.395Z","title":"The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name…","severity":"HIGH","score":7.5,"vendor":"Ruby","product":"resolv","kev":false,"epss":0.00656,"kevAdded":null},{"id":"CVE-2025-6442","published":"2025-06-25T16:52:24.625Z","updated":"2025-06-25T20:42:41.093Z","title":"Ruby WEBrick read_header HTTP Request Smuggling Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Ruby","product":"WEBrick","kev":false,"epss":0.00495,"kevAdded":null},{"id":"CVE-2025-43857","published":"2025-04-28T16:02:04.459Z","updated":"2025-04-28T18:00:01.775Z","title":"net-imap rubygem vulnerable to possible DoS by memory exhaustion","severity":"MEDIUM","score":6,"vendor":"ruby","product":"net-imap","kev":false,"epss":0.00494,"kevAdded":null},{"id":"CVE-2025-27788","published":"2025-03-12T13:51:53.348Z","updated":"2025-03-12T14:04:35.186Z","title":"Ruby JSON Parser has Out-of-bounds Read","severity":"HIGH","score":7.5,"vendor":"ruby","product":"json","kev":false,"epss":0.0072,"kevAdded":null},{"id":"CVE-2025-25186","published":"2025-02-10T15:55:56.666Z","updated":"2025-02-12T15:46:11.581Z","title":"Net::IMAP vulnerable to possible DoS by memory exhaustion","severity":"MEDIUM","score":6.5,"vendor":"ruby","product":"net-imap","kev":false,"epss":0.00626,"kevAdded":null},{"id":"CVE-2024-49761","published":"2024-10-28T14:10:23.212Z","updated":"2025-11-03T20:41:10.439Z","title":"REXML ReDoS vulnerability","severity":"MEDIUM","score":6.6,"vendor":"ruby","product":"rexml","kev":false,"epss":0.0142,"kevAdded":null},{"id":"CVE-2024-43398","published":"2024-08-22T14:14:03.588Z","updated":"2025-11-03T20:38:50.990Z","title":"REXML denial of service vulnerability","severity":"MEDIUM","score":5.9,"vendor":"ruby","product":"rexml","kev":false,"epss":0.01205,"kevAdded":null},{"id":"CVE-2024-41946","published":"2024-08-01T14:22:14.014Z","updated":"2025-11-03T20:38:34.071Z","title":"REXML DoS vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ruby","product":"rexml","kev":false,"epss":0.01192,"kevAdded":null},{"id":"CVE-2024-41123","published":"2024-08-01T14:18:43.611Z","updated":"2025-11-03T20:38:32.688Z","title":"REXML DoS vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ruby","product":"rexml","kev":false,"epss":0.01283,"kevAdded":null},{"id":"CVE-2024-39908","published":"2024-07-16T17:28:07.372Z","updated":"2025-11-03T20:38:21.548Z","title":"Denial of service in REXML","severity":"MEDIUM","score":4.3,"vendor":"ruby","product":"rexml","kev":false,"epss":0.01493,"kevAdded":null},{"id":"CVE-2024-35176","published":"2024-05-16T15:13:25.100Z","updated":"2025-11-03T20:37:32.949Z","title":"REXML contains a denial of service vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ruby","product":"rexml","kev":false,"epss":0.02064,"kevAdded":null},{"id":"CVE-2015-1855","published":"2019-11-29T20:46:48.000Z","updated":"2024-08-06T04:54:16.307Z","title":"verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate…","severity":"MEDIUM","score":5.9,"vendor":"Ruby","product":"Ruby","kev":false,"epss":0.02815,"kevAdded":null},{"id":"CVE-2011-3624","published":"2019-11-26T02:50:40.000Z","updated":"2024-08-06T23:37:48.555Z","title":"Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server…","severity":"MEDIUM","score":5.3,"vendor":"Ruby","product":"Ruby","kev":false,"epss":0.01521,"kevAdded":null},{"id":"CVE-2013-6461","published":"2019-11-05T14:07:42.000Z","updated":"2024-08-06T17:39:01.356Z","title":"Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits","severity":"MEDIUM","score":6.5,"vendor":"Ruby","product":"Nokogiri gem","kev":false,"epss":0.02194,"kevAdded":null},{"id":"CVE-2013-6460","published":"2019-11-05T14:02:54.000Z","updated":"2024-08-06T17:39:01.455Z","title":"Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents","severity":"MEDIUM","score":6.5,"vendor":"Ruby","product":"Nokogiri gem","kev":false,"epss":0.02083,"kevAdded":null},{"id":"CVE-2016-2339","published":"2017-01-06T21:00:00.000Z","updated":"2024-08-05T23:24:48.934Z","title":"An exploitable heap overflow vulnerability exists in the Fiddle::Function.new \"initialize\" function functionality of Ruby. In Fiddle::Function.new \"initialize\"…","severity":"CRITICAL","score":9.8,"vendor":"Ruby","product":"Ruby","kev":false,"epss":0.05144,"kevAdded":null},{"id":"CVE-2016-2337","published":"2017-01-06T21:00:00.000Z","updated":"2024-08-05T23:24:49.158Z","title":"Type confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different type of object than String as \"retval\" argument can cause…","severity":"CRITICAL","score":9.8,"vendor":"Ruby","product":"Ruby","kev":false,"epss":0.06153,"kevAdded":null},{"id":"CVE-2016-2336","published":"2017-01-06T21:00:00.000Z","updated":"2024-08-05T23:24:48.901Z","title":"Type confusion exists in two methods of Ruby's WIN32OLE class, ole_invoke and ole_query_interface. Attacker passing different type of object than this assumed…","severity":"CRITICAL","score":9.8,"vendor":"Ruby","product":"Ruby","kev":false,"epss":0.03355,"kevAdded":null}]}