Product by Debian
Ruby2.7
16 known vulnerabilities in Ruby2.7 (Debian), 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-41816 | CGI: Buffer Overflow | 9.8 | |
| High | CVE-2026-41316 | ERB has an @_init deserialization guard bypass via def_module / def_method / def_class | 8.1 | |
| High | CVE-2021-41817 | Ruby Date: Denial of Service | 7.5 | |
| High | CVE-2021-41819 | CGI: security vulnerability | 7.5 | |
| Critical | CVE-2026-27820 | zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption | 9.8 | |
| High | CVE-2025-24294 | Ruby Resolv: Denial of Service | 7.5 | |
| High | CVE-2024-49761 | REXML ReDoS vulnerability | 7.5 | |
| High | CVE-2025-61594 | URI Credential Leakage Bypass over CVE-2025-27221 | 7.5 | |
| Medium | CVE-2024-35176 | REXML contains a denial of service vulnerability | 5.3 | |
| Medium | CVE-2024-43398 | REXML denial of service vulnerability | 5.9 | |
| High | CVE-2024-41123 | REXML DoS vulnerability | 5.3 | |
| Medium | CVE-2024-39908 | Denial of service in REXML | 4.3 | |
| High | CVE-2024-41946 | REXML DoS vulnerability | 5.3 | |
| High | CVE-2025-27219 | Ruby CGI: Allocation of Resources Without Limits or Throttling | 5.8 | |
| High | CVE-2025-27220 | Ruby CGI: Inefficient Regular Expression Complexity | 4.0 | |
| Medium | CVE-2025-27221 | Ruby URI: Improper Removal of Sensitive Information Before Storage or Transfer | 3.2 |