Skip to content
OpenAdvisories

Package · Debian

ruby2.7

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2021-41816

    Buffer overrun in CGI.escape_html

    CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and long have different numbers of bytes. This also affects the CGI gem before 0.3.1 …

    ruby ruby2.7 ruby3.0 ruby2.7 Debian Ubuntu Alpine RubyGems