Package · Ubuntu

ruby-sidekiq

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 7.5

CVE-2022-23837

Denial of service in sidekiq

In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.

sidekiq ruby-sidekiq ruby-sidekiq Debian Ubuntu RubyGems

Jan 21, 2022
Medium 6.1

CVE-2021-30151

Cross-site Scripting in Sidekiq

Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.

sidekiq ruby-sidekiq ruby-sidekiq Debian Ubuntu RubyGems

Apr 6, 2021