Skip to content
OpenAdvisories

Package · RubyGems

savon

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.1
    CVE-2026-53510

    Savon::Model evaluates WSDL operation names as Ruby source

    Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .all_operations interpolates attacker-controlled WSDL operation names into Ruby source passed to module_eval, allowing Ruby code execution in the application process. This issue is fixed in ve…

    savonrb savon savon RubyGems