RubyGems Package Vulnerabilities

All 408 Ruby gems with known CVEs, ranked by live CVE volume — 1,040 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 51.sanitize4 CVEs
  2. 52.uri4 CVEs
  3. 53.websocket-driver4 CVEs
  4. 54.actiontext3 CVEs
  5. 55.activeadmin3 CVEs
  6. 56.chartkick3 CVEs
  7. 57.concurrent-ruby3 CVEs
  8. 58.decidim-verifications3 CVEs
  9. 59.devise-two-factor3 CVEs
  10. 60.faraday3 CVEs
  11. 61.geminabox3 CVEs
  12. 62.git3 CVEs
  13. 63.gollum3 CVEs
  14. 64.google-protobuf3 CVEs
  15. 65.httparty3 CVEs
  16. 66.json-jwt3 CVEs
  17. 67.omniauth3 CVEs
  18. 68.openssl3 CVEs
  19. 69.phlex3 CVEs
  20. 70.private_address_check3 CVEs
  21. 71.rack-cors3 CVEs
  22. 72.rdoc3 CVEs
  23. 73.resque3 CVEs
  24. 74.rest-client3 CVEs
  25. 75.rubyzip3 CVEs
  26. 76.secure_headers3 CVEs
  27. 77.sidekiq-unique-jobs3 CVEs
  28. 78.spina3 CVEs
  29. 79.spree_api3 CVEs
  30. 80.actionmailer2 CVEs
  31. 81.addressable2 CVEs
  32. 82.administrate2 CVEs
  33. 83.bson2 CVEs
  34. 84.bsv-sdk2 CVEs
  35. 85.cocoapods-downloader2 CVEs
  36. 86.css_parser2 CVEs
  37. 87.decidim-meetings2 CVEs
  38. 88.decidim-templates2 CVEs
  39. 89.doorkeeper-openid_connect2 CVEs
  40. 90.echor2 CVEs
  41. 91.excon2 CVEs
  42. 92.facter2 CVEs
  43. 93.faye2 CVEs
  44. 94.field_test2 CVEs
  45. 95.git-fastclone2 CVEs
  46. 96.google_sign_in2 CVEs
  47. 97.i18n2 CVEs
  48. 98.iodine2 CVEs
  49. 99.jruby-openssl2 CVEs
  50. 100.kaminari2 CVEs

Which RubyGems packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →