RubyGems Package Vulnerabilities

All 426 Ruby gems with known CVEs, ranked by live CVE volume — 1,121 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1.actionpack66 CVEs
  2. 2.rack54 CVEs
  3. 3.nokogiri46 CVEs
  4. 4.rubygems-update25 CVEs
  5. 5.activerecord23 CVEs
  6. 6.puppet23 CVEs
  7. 7.activesupport19 CVEs
  8. 8.activestorage15 CVEs
  9. 9.publify_core15 CVEs
  10. 10.rails-html-sanitizer15 CVEs
  11. 11.actionview14 CVEs
  12. 12.passenger14 CVEs
  13. 13.puma14 CVEs
  14. 14.decidim13 CVEs
  15. 15.camaleon_cms11 CVEs
  16. 16.oj11 CVEs
  17. 17.openc311 CVEs
  18. 18.rails11 CVEs
  19. 19.fat_free_crm10 CVEs
  20. 20.net-imap10 CVEs
  21. 21.ruby-saml10 CVEs
  22. 22.decidim-core9 CVEs
  23. 23.jquery-rails9 CVEs
  24. 24.loofah9 CVEs
  25. 25.avo8 CVEs
  26. 26.katello8 CVEs
  27. 27.rexml8 CVEs
  28. 28.bootstrap7 CVEs
  29. 29.bootstrap-sass7 CVEs
  30. 30.fluentd7 CVEs
  31. 31.jquery-ui-rails7 CVEs
  32. 32.lodash-rails7 CVEs
  33. 33.spree7 CVEs
  34. 34.devise6 CVEs
  35. 35.doorkeeper6 CVEs
  36. 36.ember-source6 CVEs
  37. 37.json6 CVEs
  38. 38.mcp6 CVEs
  39. 39.sinatra6 CVEs
  40. 40.view_component6 CVEs
  41. 41.bundler5 CVEs
  42. 42.carrierwave5 CVEs
  43. 43.cgi5 CVEs
  44. 44.crass5 CVEs
  45. 45.grpc5 CVEs
  46. 46.mail5 CVEs
  47. 47.sidekiq5 CVEs
  48. 48.webrick5 CVEs
  49. 49.yard5 CVEs
  50. 50.decidim-admin4 CVEs

Which RubyGems packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →