Skip to content
OpenAdvisories

Vendor

savonrb

1 known vulnerabilities.

Products

savon 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-53510

    Savon::Model evaluates WSDL operation names as Ruby source

    Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .all_operations interpolates attacker-controlled WSDL operation names into Ruby source passed to module_eval, allowing Ruby code execution in the application process. This issue is fixed in ve…

    savonrb savon savon RubyGems