RubyGems728 advisories

RubyGems security advisories

Most-affected RubyGems packages

nokogiri — 48 advisories
rack — 44 advisories
actionpack — 25 advisories
rubygems-update — 25 advisories
publify_core — 15 advisories
puma — 14 advisories
camaleon_cms — 14 advisories
puppet — 14 advisories
decidim — 12 advisories
net-imap — 10 advisories
fat_free_crm — 10 advisories
rails-html-sanitizer — 10 advisories
openc3 — 9 advisories
activestorage — 9 advisories
actionview — 9 advisories
ruby-saml — 9 advisories
katello — 8 advisories
rexml — 8 advisories
passenger — 8 advisories
avo — 7 advisories

Latest RubyGems advisories

GHSA-5prr-v3j2-97mh — medium · RubyGems/nokogiri
CVE-2026-55518 — critical · RubyGems/avo
CVE-2026-12515 — medium · RubyGems/katello
CVE-2026-47242 — medium · RubyGems/net-imap
CVE-2026-47240 — medium · RubyGems/net-imap
CVE-2026-47737 — high · RubyGems/puma
CVE-2026-47736 — high · RubyGems/puma
GHSA-xf4v-w5x5-pv79 — medium · RubyGems/spree
CVE-2026-44476 — medium · RubyGems/doorkeeper-openid_connect
CVE-2026-44587 — medium · RubyGems/carrierwave
CVE-2026-45363 — high · RubyGems/jwt
MAL-2026-3635 — medium · RubyGems/knot-rspec-formatter-json
MAL-2026-3634 — medium · RubyGems/knot-rails-assets-pipeline
MAL-2026-3633 — medium · RubyGems/knot-rack-session-store
MAL-2026-3632 — medium · RubyGems/knot-devise-jwt-helper
MAL-2026-3631 — medium · RubyGems/knot-date-utils-rb
MAL-2026-3630 — medium · RubyGems/knot-activesupport-logger
MAL-2026-3636 — medium · RubyGems/knot-simple-formatter
CVE-2026-44837 — medium · RubyGems/view_component
CVE-2026-44836 — medium · RubyGems/view_component
CVE-2026-40295 — medium · RubyGems/devise
CVE-2025-67202 — medium · RubyGems/sidekiq-cron
CVE-2026-44511 — high · RubyGems/katalyst-koi
CVE-2026-44312 — medium · RubyGems/css_parser
GHSA-v2fc-qm4h-8hqv — medium · RubyGems/nokogiri
GHSA-c4rq-3m3g-8wgx — high · RubyGems/nokogiri
GHSA-3h96-34p3-xm76 — medium · RubyGems/graphql
CVE-2026-42257 — medium · RubyGems/net-imap
CVE-2026-42258 — medium · RubyGems/net-imap
CVE-2026-42256 — medium · RubyGems/net-imap
CVE-2026-42246 — high · RubyGems/net-imap
CVE-2026-42205 — high · RubyGems/avo
CVE-2026-41316 — high · RubyGems/erb
GHSA-2wvh-87g2-89hr — critical · RubyGems/openc3
CVE-2026-42087 — critical · RubyGems/openc3
CVE-2026-42086 — medium · RubyGems/openc3
CVE-2026-42085 — medium · RubyGems/openc3
CVE-2026-42084 — high · RubyGems/openc3
CVE-2026-41493 — medium · RubyGems/yard
CVE-2026-27820 — medium · RubyGems/zlib

Stateward audits your RubyGems dependencies on every pull request and only flags what your code reaches.

Scan my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.