CVE-2024-27280
Critical · 9.8CVSS
9.8
EPSS
2.4%
Published
May 14, 2024
CISA due date
—
Cloudanix analysis
A flaw in a core text-handling component of certain Ruby versions can let attackers peek at internal memory and potentially steal sensitive information from applications.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- Low
- Impact
- Data Exposure
- Component
- Library
- Class
- Buffer Overflow
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Buffer overread in StringIO ungetbyte/ungetc methods allows reading past the end of a string buffer, with subsequent gets calls potentially returning arbitrary memory contents.
Why it matters to the business
Attackers may obtain sensitive data from process memory, increasing risk of credential theft or further system compromise in affected Ruby-based applications.
How an attack unfolds
An attacker supplies crafted input that invokes ungetbyte or ungetc on a StringIO instance to trigger the overread condition, then calls gets to retrieve leaked memory values that may contain secrets or internal data structures.
How to fix it
Upgrade Ruby 3.0 installations to stringio 3.0.1.1 or later and Ruby 3.1 installations to stringio 3.0.1.2 or later; for the listed affected product, deploy the fixed version 15.0.5 or newer.
How to confirm the fix worked
Verify deployed stringio gem version meets or exceeds the listed fixed releases for the corresponding Ruby minor version, and confirm the application no longer exhibits overread behavior under targeted test cases.
Typical attack path
- Identify application endpoints accepting input processed via StringIO in Ruby 3.0.x or 3.1.x
- Craft and submit input triggering repeated ungetbyte/ungetc operations to exceed buffer bounds
- Invoke gets on the same StringIO object to capture memory contents returned by the overread
- Parse leaked data for credentials, tokens, or other exploitable information to pivot
How to detect it
Review application and web server logs for anomalous StringIO usage patterns or unexpected large or malformed inputs around the time of publication; correlate with any observed memory disclosure artifacts in error logs or output streams.
What your security team should do
- Prioritize patching all Ruby 3.0 and 3.1 environments to the specified stringio fixed versions within standard change windows
- Scan inventories for any remaining affected Ruby deployments and schedule immediate upgrades
- Review application code for direct or indirect use of StringIO ungetbyte/ungetc patterns and add defensive input validation where feasible
The record
A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fixed version; however, for Ruby 3.0 users, a fixed version is stringio 3.0.1.1, and for Ruby 3.1 users, a fixed version is stringio 3.0.1.2.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| RubyGems | stringio | 0 | 3.0.1.1 |
| AlmaLinux:8 | ruby | 0 | 3.0.7-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | ruby | 0 | 3.1.5-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | ruby | 0 | 3.3.1-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | ruby | 0 | 2.5.9-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | ruby-bundled-gems | 0 | 3.1.5-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | ruby-bundled-gems | 0 | 3.3.1-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | ruby-default-gems | 0 | 3.0.7-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | ruby-default-gems | 0 | 3.1.5-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | ruby-default-gems | 0 | 3.3.1-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | ruby-devel | 0 | 3.0.7-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | ruby-devel | 0 | 3.1.5-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | ruby-devel | 0 | 3.3.1-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | ruby-devel | 0 | 2.5.9-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | ruby-doc | 0 | 3.0.7-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | ruby-doc | 0 | 3.1.5-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | ruby-doc | 0 | 3.3.1-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | ruby-doc | 0 | 2.5.9-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | ruby-irb | 0 | 2.5.9-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | ruby-libs | 0 | 3.0.7-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | ruby-libs | 0 | 3.1.5-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | ruby-libs | 0 | 3.3.1-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | ruby-libs | 0 | 2.5.9-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-abrt | 0 | 0.4.0-1.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-abrt | 0 | 0.4.0-1.module_el8.9.0+3746+91b8233a |
| AlmaLinux:8 | rubygem-abrt | 0 | 0.4.0-1.module_el8.10.0+3799+191214cc |
| AlmaLinux:8 | rubygem-abrt | 0 | 0.3.0-4.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-abrt-doc | 0 | 0.4.0-1.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-abrt-doc | 0 | 0.4.0-1.module_el8.9.0+3746+91b8233a |
| AlmaLinux:8 | rubygem-abrt-doc | 0 | 0.4.0-1.module_el8.10.0+3799+191214cc |
| AlmaLinux:8 | rubygem-abrt-doc | 0 | 0.3.0-4.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-bigdecimal | 0 | 3.0.0-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-bigdecimal | 0 | 3.1.1-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-bigdecimal | 0 | 3.1.5-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-bigdecimal | 0 | 1.3.4-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-bson | 0 | 4.3.0-2.module_el8.5.0+259+8cec6917 |
| AlmaLinux:8 | rubygem-bson | 0 | 4.3.0-2.module_el8.5.0+2625+ec418553 |
| AlmaLinux:8 | rubygem-bson | 0 | 4.3.0-2.module_el8.6.0+3170+4b08f9d4 |
| AlmaLinux:8 | rubygem-bson-doc | 0 | 4.3.0-2.module_el8.5.0+2625+ec418553 |
| AlmaLinux:8 | rubygem-bundler | 0 | 2.2.33-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-bundler | 0 | 2.3.27-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-bundler | 0 | 2.5.9-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-bundler | 0 | 1.16.1-4.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-bundler-doc | 0 | 1.16.1-4.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-did_you_mean | 0 | 1.2.0-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-io-console | 0 | 0.5.7-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-io-console | 0 | 0.5.11-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-io-console | 0 | 0.7.1-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-io-console | 0 | 0.4.6-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-irb | 0 | 1.3.5-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-irb | 0 | 1.4.1-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-irb | 0 | 1.11.0-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-json | 0 | 2.5.1-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-json | 0 | 2.6.1-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-json | 0 | 2.7.1-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-json | 0 | 2.1.0-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-minitest | 0 | 5.14.2-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-minitest | 0 | 5.15.0-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-minitest | 0 | 5.20.0-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-minitest | 0 | 5.10.3-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-mongo | 0 | 2.5.1-2.module_el8.5.0+2625+ec418553 |
| AlmaLinux:8 | rubygem-mongo-doc | 0 | 2.5.1-2.module_el8.5.0+2625+ec418553 |
| AlmaLinux:8 | rubygem-mysql2 | 0 | 0.5.3-2.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-mysql2 | 0 | 0.5.3-3.module_el8.9.0+3746+91b8233a |
| AlmaLinux:8 | rubygem-mysql2 | 0 | 0.5.5-1.module_el8.10.0+3799+191214cc |
| AlmaLinux:8 | rubygem-mysql2 | 0 | 0.4.10-4.module_el8.5.0+259+8cec6917 |
| AlmaLinux:8 | rubygem-mysql2 | 0 | 0.4.10-4.module_el8.5.0+2625+ec418553 |
| AlmaLinux:8 | rubygem-mysql2 | 0 | 0.4.10-4.module_el8.6.0+3170+4b08f9d4 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0 | 0.5.3-2.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0 | 0.5.3-3.module_el8.9.0+3746+91b8233a |
| AlmaLinux:8 | rubygem-mysql2-doc | 0 | 0.5.5-1.module_el8.10.0+3799+191214cc |
| AlmaLinux:8 | rubygem-mysql2-doc | 0 | 0.4.10-4.module_el8.5.0+2625+ec418553 |
| AlmaLinux:8 | rubygem-net-telnet | 0 | 0.1.1-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-openssl | 0 | 2.1.2-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-pg | 0 | 1.2.3-1.module_el8.5.0+118+1ab773e1 |
| AlmaLinux:8 | rubygem-pg | 0 | 1.2.3-1.module_el8.5.0+2595+0c654ebc |
| AlmaLinux:8 | rubygem-pg | 0 | 1.2.3-1.module_el8.6.0+3144+d138acf1 |
| AlmaLinux:8 | rubygem-pg | 0 | 1.3.2-1.module_el8.9.0+3746+91b8233a |
| AlmaLinux:8 | rubygem-pg | 0 | 1.5.4-1.module_el8.10.0+3799+191214cc |
| AlmaLinux:8 | rubygem-pg | 0 | 1.0.0-3.module_el8.9.0+3635+c6f99506 |
| AlmaLinux:8 | rubygem-pg-doc | 0 | 1.2.3-1.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-pg-doc | 0 | 1.2.3-1.module_el8.5.0+2595+0c654ebc |
| AlmaLinux:8 | rubygem-pg-doc | 0 | 1.3.2-1.module_el8.9.0+3746+91b8233a |
| AlmaLinux:8 | rubygem-pg-doc | 0 | 1.5.4-1.module_el8.10.0+3799+191214cc |
| AlmaLinux:8 | rubygem-pg-doc | 0 | 1.0.0-3.module_el8.9.0+3635+c6f99506 |
| AlmaLinux:8 | rubygem-power_assert | 0 | 1.2.1-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-power_assert | 0 | 2.0.1-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-power_assert | 0 | 2.0.3-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-power_assert | 0 | 1.1.1-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-psych | 0 | 3.3.2-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-psych | 0 | 4.0.4-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-psych | 0 | 5.1.2-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-psych | 0 | 3.0.2-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-racc | 0 | 1.7.3-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-rake | 0 | 13.0.3-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-rake | 0 | 13.0.6-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-rake | 0 | 13.1.0-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-rake | 0 | 12.3.3-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-rbs | 0 | 1.4.0-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-rbs | 0 | 2.7.0-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-rbs | 0 | 3.4.0-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-rdoc | 0 | 6.3.4.1-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-rdoc | 0 | 6.4.1.1-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-rdoc | 0 | 6.6.3.1-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-rdoc | 0 | 6.0.1.1-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-rexml | 0 | 3.2.5-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-rexml | 0 | 3.2.5-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-rexml | 0 | 3.2.6-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-rss | 0 | 0.2.9-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-rss | 0 | 0.2.9-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-rss | 0 | 0.3.0-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-test-unit | 0 | 3.3.7-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-test-unit | 0 | 3.5.3-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-test-unit | 0 | 3.6.1-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-test-unit | 0 | 3.2.7-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygem-typeprof | 0 | 0.15.2-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygem-typeprof | 0 | 0.21.3-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygem-typeprof | 0 | 0.21.9-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygem-xmlrpc | 0 | 0.3.0-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygems | 0 | 3.2.33-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygems | 0 | 3.3.27-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygems | 0 | 3.5.9-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygems | 0 | 2.7.6.3-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:8 | rubygems-devel | 0 | 3.2.33-143.module_el8.10.0+3852+ce828b19 |
| AlmaLinux:8 | rubygems-devel | 0 | 3.3.27-143.module_el8.10.0+3854+02eaa59a |
| AlmaLinux:8 | rubygems-devel | 0 | 3.5.9-2.module_el8.10.0+3855+767cb125 |
| AlmaLinux:8 | rubygems-devel | 0 | 2.7.6.3-112.module_el8.10.0+3871+342e2c2f |
| AlmaLinux:9 | ruby | 0 | 3.1.5-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | ruby | 0 | 3.3.1-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | ruby | 0 | 3.0.7-162.el9_4 |
| AlmaLinux:9 | ruby-bundled-gems | 0 | 3.1.5-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | ruby-bundled-gems | 0 | 3.3.1-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | ruby-default-gems | 0 | 3.1.5-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | ruby-default-gems | 0 | 3.3.1-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | ruby-default-gems | 0 | 3.0.7-162.el9_4 |
| AlmaLinux:9 | ruby-devel | 0 | 3.1.5-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | ruby-devel | 0 | 3.3.1-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | ruby-devel | 0 | 3.0.7-162.el9_4 |
| AlmaLinux:9 | ruby-doc | 0 | 3.1.5-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | ruby-doc | 0 | 3.3.1-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | ruby-doc | 0 | 3.0.7-162.el9_4 |
| AlmaLinux:9 | ruby-libs | 0 | 3.1.5-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | ruby-libs | 0 | 3.3.1-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | ruby-libs | 0 | 3.0.7-162.el9_4 |
| AlmaLinux:9 | rubygem-bigdecimal | 0 | 3.1.1-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-bigdecimal | 0 | 3.1.5-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-bigdecimal | 0 | 3.0.0-162.el9_4 |
| AlmaLinux:9 | rubygem-bundler | 0 | 2.3.27-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-bundler | 0 | 2.5.9-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-bundler | 0 | 2.2.33-162.el9_4 |
| AlmaLinux:9 | rubygem-io-console | 0 | 0.5.11-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-io-console | 0 | 0.7.1-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-io-console | 0 | 0.5.7-162.el9_4 |
| AlmaLinux:9 | rubygem-irb | 0 | 1.4.1-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-irb | 0 | 1.11.0-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-irb | 0 | 1.3.5-162.el9_4 |
| AlmaLinux:9 | rubygem-json | 0 | 2.6.1-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-json | 0 | 2.7.1-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-json | 0 | 2.5.1-162.el9_4 |
| AlmaLinux:9 | rubygem-minitest | 0 | 5.15.0-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-minitest | 0 | 5.20.0-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-minitest | 0 | 5.14.2-162.el9_4 |
| AlmaLinux:9 | rubygem-mysql2 | 0 | 0.5.4-1.module_el9.1.0+8+503f6fbd |
| AlmaLinux:9 | rubygem-mysql2 | 0 | 0.5.5-1.module_el9.4.0+75+1a8fe981 |
| AlmaLinux:9 | rubygem-mysql2-doc | 0 | 0.5.4-1.module_el9.1.0+8+503f6fbd |
| AlmaLinux:9 | rubygem-mysql2-doc | 0 | 0.5.5-1.module_el9.4.0+75+1a8fe981 |
| AlmaLinux:9 | rubygem-pg | 0 | 1.3.5-1.module_el9.1.0+8+503f6fbd |
| AlmaLinux:9 | rubygem-pg | 0 | 1.5.4-1.module_el9.4.0+75+1a8fe981 |
| AlmaLinux:9 | rubygem-pg-doc | 0 | 1.3.5-1.module_el9.1.0+8+503f6fbd |
| AlmaLinux:9 | rubygem-pg-doc | 0 | 1.5.4-1.module_el9.4.0+75+1a8fe981 |
| AlmaLinux:9 | rubygem-power_assert | 0 | 2.0.1-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-power_assert | 0 | 2.0.3-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-power_assert | 0 | 1.2.1-162.el9_4 |
| AlmaLinux:9 | rubygem-psych | 0 | 4.0.4-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-psych | 0 | 5.1.2-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-psych | 0 | 3.3.2-162.el9_4 |
| AlmaLinux:9 | rubygem-racc | 0 | 1.7.3-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-rake | 0 | 13.0.6-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-rake | 0 | 13.1.0-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-rake | 0 | 13.0.3-162.el9_4 |
| AlmaLinux:9 | rubygem-rbs | 0 | 2.7.0-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-rbs | 0 | 3.4.0-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-rbs | 0 | 1.4.0-162.el9_4 |
| AlmaLinux:9 | rubygem-rdoc | 0 | 6.4.1.1-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-rdoc | 0 | 6.6.3.1-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-rdoc | 0 | 6.3.4.1-162.el9_4 |
| AlmaLinux:9 | rubygem-rexml | 0 | 3.2.5-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-rexml | 0 | 3.2.6-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-rexml | 0 | 3.2.5-162.el9_4 |
| AlmaLinux:9 | rubygem-rss | 0 | 0.2.9-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-rss | 0 | 0.3.0-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-rss | 0 | 0.2.9-162.el9_4 |
| AlmaLinux:9 | rubygem-test-unit | 0 | 3.5.3-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-test-unit | 0 | 3.6.1-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-test-unit | 0 | 3.3.7-162.el9_4 |
| AlmaLinux:9 | rubygem-typeprof | 0 | 0.21.3-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygem-typeprof | 0 | 0.21.9-2.module_el9.4.0+102+68a93853 |
| AlmaLinux:9 | rubygem-typeprof | 0 | 0.15.2-162.el9_4 |
| AlmaLinux:9 | rubygems | 0 | 3.3.27-144.module_el9.4.0+101+d58a8d95 |
| AlmaLinux:9 | rubygems | 0 | 3.5.9-2.module_el9.4.0+102+68a93853 |
Related vulnerabilities
- CVE-2025-58767 REXML is an XML toolkit for Ruby. Also affects ruby
- CVE-2025-27221 In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge… Also affects ruby
- CVE-2025-25186 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Also affects ruby
- CVE-2024-49761 REXML is an XML toolkit for Ruby. Also affects ruby
- CVE-2024-41946 REXML is an XML toolkit for Ruby. Also affects ruby
- CVE-2024-41123 REXML is an XML toolkit for Ruby. Also affects ruby
- CVE-2024-39908 REXML is an XML toolkit for Ruby. Also affects ruby
- CVE-2024-27281 An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through… Also affects ruby