Skip to content
OpenAdvisories

Vendor

defunkt

1 known vulnerabilities.

Products

gist 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-105221 Public exploit

    Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification

    The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because http_connection in lib/gist.rb sets VERIFY_NONE. Attackers can present any certificate to read or modify G…

    defunkt gist gist Ubuntu