Skip to content
OpenAdvisories

Package · RubyGems

rdoc

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 4.5
    CVE-2024-27281

    RDoc RCE vulnerability with .rdoc_options

    An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When parsing .rdoc_options (used for configuration in RDoc) as a YAML file, object injection and resultant remote code execution are possible because there are no r…

    ruby2.3 ruby ruby2.5 jruby Debian Ubuntu Azure Linux Alpine Wolfi RubyGems
  • High 7.0
    CVE-2021-31799

    Arbitrary Code Execution in Rdoc

    In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.

    ruby2.3 ruby ruby2.5 ruby2.7 Debian Ubuntu Alpine RubyGems
  • Medium —
    CVE-2013-0256

    RDoc contains XSS vulnerability

    darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

    rdoc RubyGems