Vendor
Ruby
36 known vulnerabilities in products by Ruby, 0 of them actively exploited (CISA KEV).
Key figures
36
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2016-2337 | Ruby: Type Confusion | 9.8 | |
| Critical | CVE-2016-2339 | Ruby: security vulnerability | 9.8 | |
| Critical | CVE-2016-2336 | Ruby: Type Confusion | 9.8 | |
| High | CVE-2026-41316 | ERB has an @_init deserialization guard bypass via def_module / def_method / def_class | 8.1 | |
| Critical | CVE-2026-27820 | zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption | 9.8 | |
| Medium | CVE-2015-1855 | Ruby: security vulnerability | 5.9 | |
| Critical | CVE-2026-33210 | Ruby JSON has a format string injection vulnerability | 9.1 | |
| High | CVE-2025-24294 | Ruby Resolv: Denial of Service | 7.5 | |
| Medium | CVE-2013-6461 | Ruby Nokogiri gem: security vulnerability | 6.5 | |
| High | CVE-2024-49761 | REXML ReDoS vulnerability | 7.5 | |
| Medium | CVE-2013-6460 | Ruby Nokogiri gem: Infinite Loop | 6.5 | |
| High | CVE-2025-61594 | URI Credential Leakage Bypass over CVE-2025-27221 | 7.5 | |
| Medium | CVE-2024-35176 | REXML contains a denial of service vulnerability | 5.3 | |
| Critical | CVE-2026-42257 | net-imap: Command Injection via "raw" arguments to multiple commands | 9.8 | |
| High | CVE-2026-71847 | Ruby JSON: Use After Free | — | |
| Medium | CVE-2026-47240 | Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument | — | |
| Medium | CVE-2024-43398 | REXML denial of service vulnerability | 5.9 | |
| High | CVE-2024-41123 | REXML DoS vulnerability | 5.3 | |
| High | CVE-2026-80212 | Ruby Resolv: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-42258 | net-imap: Command Injection via unvalidated Symbol inputs | 5.3 | |
| Medium | CVE-2024-39908 | Denial of service in REXML | 4.3 | |
| Medium | CVE-2011-3624 | Ruby: security vulnerability | 5.3 | |
| High | CVE-2024-41946 | REXML DoS vulnerability | 5.3 | |
| High | CVE-2025-27788 | Ruby JSON Parser has Out-of-bounds Read | 7.5 | |
| High | CVE-2026-42245 | net-imap: Quadratic complexity when reading response literals | 7.5 |