Browse CVEs by Ecosystem and Severity

OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)

kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)

Active Storage has possible arbitrary file read and remote code execution in Active Storage variant processing

Fluentd is Vulnerable to Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation

OpenC3 COSMOS: Permissions Bypass Provides User Access to Unassigned Administrative Actions via Script Runner Tool

OpenC3 COSMOS has SQL Injection in QuestDB Time-Series Database

Decidim has a cross-site scripting (XSS) in user name

Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization

Graphiti Affected by Arbitrary Method Execution via Unvalidated Relationship Names

openc3-api Vulnerable to Unauthenticated Remote Code Execution

Ruby-saml allows a Libxml2 Canonicalization error to bypass Digest/Signature validation

Ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)

Spree Commerce is vulnerable to RCE through Search API

Active Storage allowed transformation methods that were potentially unsafe

Spree has Remote Command Execution vulnerability in search functionality

JWE is missing AES-GCM authentication tag validation in encrypted JWE

Job Iteration API is vulnerable to OS Command Injection attack through its CsvEnumerator class

OpenC3 COSMOS Vulnerable to Directory Traversal via /script-api/scripts/ endpoint

Camaleon CMS Vulnerable to Privilege Escalation through a Mass Assignment

Ruby SAML allows a SAML authentication bypass due to namespace handling (parser differential)

Ruby SAML allows a SAML authentication bypass due to DOCTYPE handling (parser differential)

graphql allows remote code execution when loading a crafted GraphQL schema

Oxidized Web RANCID migration page allows unauthenticated user to gain control over Linux user account

omniauth-saml vulnerable to Improper Verification of Cryptographic Signature

SAML authentication bypass via Incorrect XPath selector

Command Injection in sequenceserver

StringIO buffer overread vulnerability

discordrb OS Command Injection vulnerability

Puppet Bolt privilege escalation vulnerability

geokit-rails Command Injection vulnerability

Puma HTTP Request/Response Smuggling vulnerability

ruby-saml vulnerable to XPath injection

Server-Side Template Injection in Camaleon CMS

Buffer overflow in sponge queue functions

Code injection in pdf_info

flash_tool Gem for Ruby File Download Handling Arbitrary Command Execution

curupira is vulnerable to SQL injection

Integer overflow in publify_core

Publify Improper Input Validation vulnerability

PDFKit vulnerable to Command Injection

OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value

Active Record RCE bug with Serialized Columns

OS Command Injection in awesome spawn

Improper handling of double quotes in file name in Diffy in Windows environment

JMESPath for Ruby uses unsafe JSON.load when safe JSON.parse is preferable

Arbitrary file write in dragonfly

Possible shell escape sequence injection vulnerability in Rack

omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third party

papercrop does not properly handle crop input