Skip to content
OpenAdvisories

Package · Wolfi

ruby-3.4

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-54696

    Ruby JSON: JSON generator heap buffer overflow when streaming to an IO

    Ruby JSON is a JSON implementation for Ruby. Versions 2.9.0 through 2.19.8 are vulnerable to heap buffer overflow when the JSON generator is provided with an oversized streamed object. When streaming to an IO JSON.dump(obj, io) and JSON::State#generate(obj, i…

    ruby json ruby2.3 ruby2.5 Debian Ubuntu Wolfi RubyGems
  • Low 3.2
    CVE-2025-27221

    URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+

    In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.

    ruby-lang URI kube-fluentd-operator ruby2.3 Debian Ubuntu Azure Linux Wolfi RubyGems