| Bug | bookworm | sid | Description |
|---|
| CVE-2025-27221 | vulnerable (no DSA) | vulnerable | In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.jo ... |
| CVE-2025-27220 | vulnerable (no DSA) | vulnerable | In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of S ... |
| CVE-2025-27219 | vulnerable (no DSA) | vulnerable | In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in ... |
| CVE-2025-25186 | vulnerable (no DSA) | vulnerable | Net::IMAP implements Internet Message Access Protocol (IMAP) client fu ... |
| CVE-2025-0306 | vulnerable (no DSA, ignored) | fixed | A vulnerability was found in Ruby. The Ruby interpreter is vulnerable ... |
| CVE-2024-49761 | vulnerable | vulnerable | REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReD ... |
| CVE-2024-43398 | vulnerable (no DSA) | vulnerable | REXML is an XML toolkit for Ruby. The REXML gem before 3.3.6 has a DoS ... |
| CVE-2024-41946 | vulnerable (no DSA) | vulnerable | REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulner ... |
| CVE-2024-41123 | vulnerable (no DSA) | vulnerable | REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some ... |
| CVE-2024-39908 | vulnerable (no DSA) | vulnerable | REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some ... |
| CVE-2024-35176 | vulnerable (no DSA) | vulnerable | REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a den ... |
| CVE-2024-27281 | fixed | vulnerable | An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in ... |
| CVE-2024-27280 | fixed | vulnerable | A buffer-overread issue was discovered in StringIO 3.0.1, as distribut ... |
| CVE-2023-28756 | vulnerable (no DSA) | vulnerable | A ReDoS issue was discovered in the Time component through 0.2.1 in Ru ... |
| CVE-2023-28755 | vulnerable (no DSA) | vulnerable | A ReDoS issue was discovered in the URI component through 0.12.0 in Ru ... |