Skip to content
OpenAdvisories

Package · RubyGems

webrick

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-6442

    Ruby WEBrick read_header HTTP Request Smuggling Vulnerability

    Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy…

    ruby WEBrick ruby2.3 ruby2.5 Debian Ubuntu Azure Linux RubyGems
  • Medium —
    CVE-2009-4492 Public exploit EPSS 16%

    WEBrick Improper Input Validation vulnerability

    WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window…

    webrick RubyGems