Skip to content
OpenAdvisories

Package · RubyGems

sidekiq

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Medium 5.5
    CVE-2024-32887

    Reflected XSS in sidekiq

    Sidekiq is simple, efficient background processing for Ruby. Sidekiq is reflected XSS vulnerability. The value of substr parameter is reflected in the response without any encoding, allowing an attacker to inject Javascript code into the response of the appli…

    sidekiq sidekiq sidekiq RubyGems
  • High 7.5
    CVE-2023-26141

    sidekiq Denial of Service vulnerability

    Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive pol…

    sidekiq RubyGems
  • High 8.3
    CVE-2023-1892 Scanner template

    Cross-site Scripting (XSS) - Reflected in sidekiq/sidekiq

    Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8.

    sidekiq sidekiq/sidekiq sidekiq RubyGems
  • High 7.5
    CVE-2022-23837

    Denial of service in sidekiq

    In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.

    sidekiq ruby-sidekiq ruby-sidekiq Debian Ubuntu RubyGems
  • Medium 6.1
    CVE-2021-30151 Scanner template

    Cross-site Scripting in Sidekiq

    Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.

    sidekiq ruby-sidekiq ruby-sidekiq Debian Ubuntu RubyGems