Security

Vulnerabilities

Real-time alerts of vulnerabilities across monitored open-source ecosystems.

Ecosystems covered

8

Alpine, Alpm, Debian & more

Total vulnerabilities tracked

515

From global vulnerability databases

Exclude malware
Package ruby

4.6

Medium

Ecosystem: Debian

Package: ruby-view-component

6.3

Medium

Ecosystem: Debian

Package: ruby-view-component

0.6

Low

Ecosystem: Debian

Package: ruby-devise

6.3

Medium

Ecosystem: Debian

Package: ruby-faraday

1.7

Low

Ecosystem: Debian

Package: ruby-css-parser

FLAT-C617D (CVE-2026-42246)

Inappropriate coding practices In ruby3.1

4.9

Medium

Ecosystem: Debian

Package: ruby3.1

FLAT-Z9JFG (CVE-2026-42256)

Asymmetric denial of service In ruby3.1

2.3

Low

Ecosystem: Debian

Package: ruby3.1

FLAT-VENYH (CVE-2026-42257)

Lack of data validation In ruby2.7

1.9

Low

Ecosystem: Debian

Package: ruby2.7

FLAT-JHNXB (CVE-2026-42245)

Improper resource allocation In ruby3.3

0.6

Low

Ecosystem: Debian

Package: ruby3.3

FLAT-DA7Q6 (CVE-2026-42258)

Server side template injection In ruby3.3

1.9

Low

Ecosystem: Debian

Package: ruby3.3

1.7

Low

Ecosystem: Debian

Package: ruby3.3

2.7

Low

Ecosystem: Alpm

Package: ruby

6.6

Medium

Ecosystem: Alpm

Package: ruby

FLAT-Z0T71 (CVE-2019-16254)

Lack of data validation In ruby

2.7

Low

Ecosystem: Alpm

Package: ruby

FLAT-JCYYJ (CVE-2019-16255)

Lack of data validation In ruby

7.2

High

Ecosystem: Alpm

Package: ruby

1.3

Low

Ecosystem: Alpm

Package: ruby-rdoc

1.3

Low

Ecosystem: Alpm

Package: ruby-rdoc

8.1

High

Ecosystem: Alpm

Package: ruby-kramdown

FLAT-XPJFZ (CVE-2021-31799)

Remote command execution In ruby-rdoc

4.4

Medium

Ecosystem: Alpm

Package: ruby-rdoc

FLAT-QPSF7 (CVE-2020-36327)

Dependency Confusion In ruby-bundler

8.1

High

Ecosystem: Alpm

Package: ruby-bundler

FLAT-5TTVJ (CVE-2020-36401)

Inappropriate coding practices In mruby

7.3

High

Ecosystem: Alpm

Package: mruby

6.6

Medium

Ecosystem: Alpm

Package: ruby-addressable

6.6

Medium

Ecosystem: Alpm

Package: ruby

FLAT-M44LT (CVE-2021-41819)

Insecurely generated cookies In ruby

6.6

Medium

Ecosystem: Alpm

Package: ruby

FLAT-6J725 (CVE-2021-31810)

Enabled default configuration In ruby

2.7

Low

Ecosystem: Alpm

Package: ruby

6.9

Medium

Ecosystem: Alpm

Package: ruby

FLAT-UF3O8 (CVE-2022-28738)

Inappropriate coding practices In ruby

8.1

High

Ecosystem: Alpm

Package: ruby

FLAT-04XKP (CVE-2022-28739)

Inappropriate coding practices In ruby

6.6

Medium

Ecosystem: Alpm

Package: ruby

FLAT-1N3YN (CVE-2021-28965)

XML injection (XXE) In ruby-rexml

6.6

Medium

Ecosystem: Alpm

Package: ruby-rexml

FLAT-T749U (CVE-2021-43809)

Insecure functionality In ruby-bundler

2.0

Low

Ecosystem: Alpm

Package: ruby-bundler

FLAT-1R8P1 (CVE-2021-4110)

Inappropriate coding practices In mruby

6.6

Medium

Ecosystem: Alpm

Package: mruby

FLAT-B4U4L (CVE-2026-34060)

Remote command execution In ruby-ruby-lsp

4.0

Medium

Ecosystem: Debian

Package: ruby-ruby-lsp

FLAT-UM0HM (CVE-2026-33635)

Lack of data validation In ruby-icalendar

1.3

Low

Ecosystem: Debian

Package: ruby-icalendar

1.3

Low

Ecosystem: Debian

Package: ruby-rack

FLAT-SUUAO (CVE-2026-33306)

Out-of-bounds read In ruby-bcrypt

4.5

Medium

Ecosystem: Debian

Package: ruby-bcrypt

0.6

Low

Ecosystem: Debian

Package: ruby-rack

FLAT-XD6IH (CVE-2026-33210)

Lack of data validation In ruby-json

4.8

Medium

Ecosystem: Debian

Package: ruby-json

FLAT-KCXQY (CVE-2026-32700)

Race condition In ruby-devise

2.3

Low

Ecosystem: Debian

Package: ruby-devise

5.2

Medium

Ecosystem: RubyGems

Package: rubylogger

5.2

Medium

Ecosystem: RubyGems

Package: freshworks-ruby

FLAT-8UC65 (CVE-2026-0980)

OS Command Injection In rubyipmi

7.7

High

Ecosystem: RubyGems

Package: rubyipmi

5.2

Medium

Ecosystem: RubyGems

Package: newrubylogger

0.1

Low

Ecosystem: Debian

Package: ruby-rack

4.6

Medium

Ecosystem: Debian

Package: ruby-rack

1.7

Low

Ecosystem: Debian

Package: ruby-faraday

FLAT-FV8VE (CVE-2026-1979)

Race condition In mruby

1.1

Low

Ecosystem: Debian

Package: mruby

0.5

Low

Ecosystem: Debian

Package: ruby-rmagick

FLAT-BTVP9 (CVE-2025-61594)

Insecurely deleted files In rubygems

2.7

Low

Ecosystem: Debian

Package: rubygems

6.7

Medium

Ecosystem: Debian

Package: ruby-httparty

5.2

Medium

Ecosystem: RubyGems

Package: prometheus_client_ruby

5.2

Medium

Ecosystem: Npm

Package: jsondatatoruby

7.9

High

Ecosystem: Debian

Package: ruby-sidekiq

1.7

Low

Ecosystem: Debian

Package: ruby-git

8.0

High

Ecosystem: RubyGems

Package: ruby-saml

8.0

High

Ecosystem: RubyGems

Package: ruby-saml

FLAT-AFEDP (CVE-2025-13120)

Out-of-bounds read In mruby

0.4

Low

Ecosystem: Debian

Package: mruby

0.6

Low

Ecosystem: Debian

Package: ruby-rack

0.6

Low

Ecosystem: Debian

Package: ruby-rack

5.2

Medium

Ecosystem: Npm

Package: shopify-ruby

FLAT-DGMH7 (CVE-2025-61919)

Improper resource allocation In ruby-rack

6.6

Medium

Ecosystem: Debian

Package: ruby-rack

5.2

Medium

Ecosystem: Npm

Package: concurrent-ruby

7.9

High

Ecosystem: Debian

Package: ruby-saml

FLAT-KTNE8 (MAL-2025-41757)

Use of software with malware In rubyreq

5.2

Medium

Ecosystem: PyPI

Package: rubyreq

FLAT-RFO99 (MAL-2025-32541)

Use of software with malware In rubytask

5.2

Medium

Ecosystem: Npm

Package: rubytask

FLAT-RSSQ0 (MAL-2025-32538)

Use of software with malware In rubyheap

5.2

Medium

Ecosystem: Npm

Package: rubyheap

FLAT-3ZREZ (MAL-2025-16864)

Use of software with malware In chatruby

5.2

Medium

Ecosystem: Npm

Package: chatruby

FLAT-SDL2L (MAL-2025-32536)

Use of software with malware In rubygrep

5.2

Medium

Ecosystem: Npm

Package: rubygrep

FLAT-NJEHF (MAL-2025-32509)

Use of software with malware In rssruby

5.2

Medium

Ecosystem: Npm

Package: rssruby

5.2

Medium

Ecosystem: Npm

Package: ruby-kafka-oauth-client

FLAT-93407 (MAL-2025-32535)

Use of software with malware In rubyfile

5.2

Medium

Ecosystem: Npm

Package: rubyfile

5.2

Medium

Ecosystem: Npm

Package: mruby_engine

FLAT-XMJQO (MAL-2025-32542)

Use of software with malware In rubytest

5.2

Medium

Ecosystem: Npm

Package: rubytest

5.2

Medium

Ecosystem: Npm

Package: ruby-limiter

5.2

Medium

Ecosystem: Npm

Package: tableau_ruby

5.2

Medium

Ecosystem: Npm

Package: quota_tracker_ruby

FLAT-1EMHB (MAL-2025-32540)

Use of software with malware In rubyore

5.2

Medium

Ecosystem: Npm

Package: rubyore

FLAT-5ZIZV (MAL-2025-32534)

Use of software with malware In rubyduino

5.2

Medium

Ecosystem: Npm

Package: rubyduino

5.2

Medium

Ecosystem: Npm

Package: ping-api-ruby

5.2

Medium

Ecosystem: Npm

Package: kafka-client-ruby

FLAT-GHQUC (MAL-2025-29331)

Use of software with malware In pitchruby

5.2

Medium

Ecosystem: Npm

Package: pitchruby

FLAT-O2Y2X (MAL-2025-25428)

Use of software with malware In liruby

5.2

Medium

Ecosystem: Npm

Package: liruby

FLAT-Z3EN1 (MAL-2025-32537)

Use of software with malware In rubyhead

5.2

Medium

Ecosystem: Npm

Package: rubyhead

5.2

Medium

Ecosystem: Npm

Package: cloudflare_ruby

FLAT-HFG0C (MAL-2025-24366)

Use of software with malware In kcruby

5.2

Medium

Ecosystem: Npm

Package: kcruby

FLAT-DQMW6 (MAL-2025-20430)

Use of software with malware In ffiruby

5.2

Medium

Ecosystem: Npm

Package: ffiruby

FLAT-SRFJD (MAL-2025-32539)

Use of software with malware In rubymdp

5.2

Medium

Ecosystem: Npm

Package: rubymdp

FLAT-W21B3 (MAL-2025-32533)

Use of software with malware In rubycoin

5.2

Medium

Ecosystem: Npm

Package: rubycoin

FLAT-FV1IK (CVE-2025-45765)

Insecure encryption algorithm In ruby-jwt

0.6

Low

Ecosystem: Debian

Package: ruby-jwt

6.8

Medium

Ecosystem: Debian

Package: ruby-graphql

FLAT-FVFBW (CVE-2025-54572)

Asymmetric denial of service In ruby-saml

2.7

Low

Ecosystem: Debian

Package: ruby-saml

FLAT-5XJRA (CVE-2025-7207)

Out-of-bounds read In mruby

2.2

Low

Ecosystem: Debian

Package: mruby

5.2

Medium

Ecosystem: Npm

Package: xero_ruby_oauth2_app

6.1

Medium

Ecosystem: Debian

Package: rubygems

FLAT-O4TC3 (CVE-2025-46336)

Session Fixation In ruby-rack-session

0.6

Low

Ecosystem: Debian

Package: ruby-rack-session

4.9

Medium

Ecosystem: Maven

Package: org.jruby:jruby

FLAT-FM3L8 (CVE-2025-43857)

Asymmetric denial of service In ruby3.1

6.6

Medium

Ecosystem: Debian

Package: ruby3.1

2.7

Low

Ecosystem: Debian

Package: ruby-saml

4.9

Medium

Ecosystem: Debian

Package: ruby-rack

2.7

Low

Ecosystem: Debian

Package: ruby-rack

1.3

Low

Ecosystem: Debian

Package: ruby-saml