Skip to content
OpenAdvisories

Package · RubyGems

passenger

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2018-12026

    Phusion Passenger SpawningKit Contains Arbitrary Read/Write Vulnerability

    During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in…

    passenger RubyGems