Browse CVEs by Ecosystem and Severity
275 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
MEDIUM
CVE-2026-107399
Mechanize sends credential headers to another origin after a meta refresh
MEDIUM
CVE-2026-107715
Mechanize sends credential headers to another host after an HTTP redirect
MEDIUM
GHSA-mwm8-39rw-8826
sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array
MEDIUM
CVE-2026-65829
MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers
MEDIUM
CVE-2026-44282
decidim-elections: Election question titles allow stored script execution
MEDIUM
CVE-2026-63435
Mail: Email address spoofing via malformed RFC 2047 encoded-words
MEDIUM
CVE-2016-1000305
guard-livereload has a directory traversal vulnerability
MEDIUM
CVE-2026-67430
MCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize flood
MEDIUM
CVE-2026-63119
MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)
MEDIUM
CVE-2026-63118
MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protection
MEDIUM
CVE-2026-54659
Pagy I18n locale option is not validated before being used in a file path
MEDIUM
CVE-2026-73428
Trix: Stored XSS via HTMLParser attribute injection on paste
MEDIUM
CVE-2026-73648
Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations
MEDIUM
CVE-2026-73490
Loofah: SVG `href` attribute bypasses local-reference restriction
MEDIUM
CVE-2026-54497
ViewComponent: Reused Component Instances Retain Stale Render Context
MEDIUM
CVE-2026-54465
websocket-driver: Memory exhaustion in HTTP header parser
MEDIUM
CVE-2026-54464
websocket-driver: Resource limit bypass via message compression
MEDIUM
CVE-2026-54463
websocket-driver: Memory exhaustion via abuse of protocol length headers
MEDIUM
CVE-2026-45573
Decidim: Push subscriptions can be abused for server-side requests
MEDIUM
CVE-2026-45572
Decidim: HTML content blocks allow stored script execution
MEDIUM
CVE-2026-45415
Decidim: CSV census record endpoints improper authorization
MEDIUM
CVE-2026-45377
Decidim: Private exports can be downloaded through reusable links
MEDIUM
CVE-2026-45376
Decidim: Admin user search allows SQL injection through similarity-based sorting
MEDIUM
CVE-2026-45330
Decidim: Verification admins can access supplied IDs from other organizations
MEDIUM
CVE-2026-45086
Decidim: Forms admin question editor lacks authorization
MEDIUM
CVE-2026-54171
Excon does not redact additional sensitive/risky headers when following redirects
MEDIUM
CVE-2026-54163
Secure Headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input
MEDIUM
CVE-2026-53769
Avo: Direct attachment upload endpoint lacks upload authorization and bypasses field-level upload policy
MEDIUM
CVE-2026-49342
YARD static cache reads raw traversal paths before router sanitization
MEDIUM
CVE-2026-44163
fluent-plugin-opentelemetry Has Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`
MEDIUM
CVE-2026-54500
Oj: intern.c form_attr (uninitialized stack read)
MEDIUM
CVE-2026-57235
Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`
MEDIUM
CVE-2026-12515
katello: missing repository authorization in content_uploads exposes cross-product content existence
MEDIUM
CVE-2026-47242
Net::IMAP: Command Injection via ID command argument
MEDIUM
CVE-2026-47240
Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument
MEDIUM
GHSA-xf4v-w5x5-pv79
Spree: CSV Formula Injection in Customer Export
MEDIUM
CVE-2026-44476
Doorkeeper Openid Connect: Dynamic Client Registration feature creates public clients with client_secret
MEDIUM
CVE-2026-44587
CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters
MEDIUM
CVE-2026-44837
view_component: System Test Entry Point Path Check Allows Sibling Directory Escape
MEDIUM
CVE-2026-44836
view_component: Preview Route Can Dispatch Inherited Helper Methods
MEDIUM
CVE-2026-40295
Devise has an Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler
MEDIUM
CVE-2025-67202
Sidekiq-cron is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL
MEDIUM
CVE-2026-44312
CSS Parser: Improper Certificate Validation allows MITM injection of remote CSS content
MEDIUM
CVE-2026-79771
Nokogiri XSLT transform has a memory leak
MEDIUM
CVE-2026-42257
net-imap vulnerable to command Injection via "raw" arguments to multiple commands
MEDIUM
CVE-2026-42258
net-imap vulnerable to command Injection via unvalidated Symbol inputs
MEDIUM
CVE-2026-42256
net-imap vulnerable to denial of service via high iteration count for `SCRAM-*` authentication
MEDIUM
CVE-2026-42086
OpenC3 COSMOS is Vulnerable to Self-XSS Through the Command Sender
MEDIUM
CVE-2026-42085
OpenC3 COSMOS allows arbitrary writes to plugins directory via path-traversed config filenames
MEDIUM
CVE-2026-41493
yard: Possible arbitrary path traversal and file access via yard server