Vendor
rubygems
7 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.9
Unauthorized gem takeover for some gems on rubygems.org
Rubygems is a package registry used to supply software for the Ruby language ecosystem. Due to a bug in the yank action, it was possible for any RubyGems.org user to remove and replace certain gems even if that user was not authorized to do so. To be vulnerab…