Skip to content
OpenAdvisories

Package · RubyGems

gemirro

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.1
    CVE-2017-16833

    Gemirro Stored XSS in Gemspec "homepage" value

    Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file.

    gemirro RubyGems