RubyGems Package Vulnerabilities

All 408 Ruby gems with known CVEs, ranked by live CVE volume — 1,040 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1.actionpack61 CVEs
  2. 2.rack49 CVEs
  3. 3.nokogiri40 CVEs
  4. 4.rubygems-update25 CVEs
  5. 5.activerecord23 CVEs
  6. 6.puppet22 CVEs
  7. 7.publify_core15 CVEs
  8. 8.activesupport14 CVEs
  9. 9.passenger14 CVEs
  10. 10.puma14 CVEs
  11. 11.rails-html-sanitizer14 CVEs
  12. 12.actionview13 CVEs
  13. 13.decidim13 CVEs
  14. 14.camaleon_cms11 CVEs
  15. 15.oj11 CVEs
  16. 16.rails11 CVEs
  17. 17.fat_free_crm10 CVEs
  18. 18.net-imap10 CVEs
  19. 19.ruby-saml10 CVEs
  20. 20.decidim-core9 CVEs
  21. 21.jquery-rails9 CVEs
  22. 22.openc39 CVEs
  23. 23.rexml9 CVEs
  24. 24.katello8 CVEs
  25. 25.lodash-rails8 CVEs
  26. 26.activestorage7 CVEs
  27. 27.avo7 CVEs
  28. 28.bootstrap7 CVEs
  29. 29.bootstrap-sass7 CVEs
  30. 30.fluentd7 CVEs
  31. 31.jquery-ui-rails7 CVEs
  32. 32.spree7 CVEs
  33. 33.doorkeeper6 CVEs
  34. 34.ember-source6 CVEs
  35. 35.loofah6 CVEs
  36. 36.sinatra6 CVEs
  37. 37.view_component6 CVEs
  38. 38.bundler5 CVEs
  39. 39.carrierwave5 CVEs
  40. 40.cgi5 CVEs
  41. 41.devise5 CVEs
  42. 42.grpc5 CVEs
  43. 43.json5 CVEs
  44. 44.sidekiq5 CVEs
  45. 45.webrick5 CVEs
  46. 46.yard5 CVEs
  47. 47.decidim-admin4 CVEs
  48. 48.dragonfly4 CVEs
  49. 49.mail4 CVEs
  50. 50.rails_admin4 CVEs

Which RubyGems packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →