deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-mj4x-wcxf-hm8x
Package: json-jwt (RUBYGEMS)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-347: Improper Verification of Cryptographic Signature
Vulnerable versions: >= 0.5.1, < 1.9.4
Patched in: 1.9.4

Summary: Json-jwt did not verify the cryptographic signature for data

Details:
The json-jwt rubygem version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attacker can forge a authentication tag. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 1.9.4 and later.
GitHub Security Advisory: GHSA-mgx3-27hr-mfgp
Package: httparty (RUBYGEMS)
Severity: HIGH (CVSS 0.0)
CWE: CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Vulnerable versions: <= 0.9.0
Patched in: 0.10.0

Summary: HTTParty does not restrict casts of string values

Details:
The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for YAML type conversion, a similar vulnerability to CVE-2013-0156.
GitHub Security Advisory: GHSA-hhwc-8g49-j8jx
Package: ruby_parser-legacy (RUBYGEMS)
Severity: HIGH (CVSS 7.8)
CWE: CWE-732: Incorrect Permission Assignment for Critical Resource
Vulnerable versions: <= 1.0.0
Patched in: unpatched

Summary: Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource

Details:
The ruby_parser-legacy (aka legacy) gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem (which has a legacy dependency) 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the `ruby_parser-legacy-1.0.0/lib/ruby_parser/legacy/ruby_parser.rb` file.
GitHub Security Advisory: GHSA-9v3m-8fp8-mj99
Package: bootstrap-sass (RUBYGEMS)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 3.0.0, < 3.4.1
Patched in: 3.4.1

Summary: Bootstrap Vulnerable to Cross-Site Scripting

Details:
Versions of `bootstrap` prior to 3.4.1 for 3.x and 4.3.1 for 4.x are vulnerable to Cross-Site Scripting (XSS). The  `data-template` attribute of the tooltip and popover plugins lacks input sanitization and may allow attacker to execute arbitrary JavaScript.


## Recommendation

For `bootstrap` 4.x upgrade to 4.3.1 or later.
For `bootstrap` 3.x upgrade to 3.4.1 or later.
GitHub Security Advisory: GHSA-9v3m-8fp8-mj99
Package: bootstrap (RUBYGEMS)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 4.3.1
Patched in: 4.3.1

Summary: Bootstrap Vulnerable to Cross-Site Scripting

Details:
Versions of `bootstrap` prior to 3.4.1 for 3.x and 4.3.1 for 4.x are vulnerable to Cross-Site Scripting (XSS). The  `data-template` attribute of the tooltip and popover plugins lacks input sanitization and may allow attacker to execute arbitrary JavaScript.


## Recommendation

For `bootstrap` 4.x upgrade to 4.3.1 or later.
For `bootstrap` 3.x upgrade to 3.4.1 or later.
GitHub Security Advisory: GHSA-vqqv-v9m2-48p2
Package: bootstrap-sass (RUBYGEMS)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: = 3.2.0.3
Patched in: 3.2.0.4

Summary: Bootstrap-sass contains code execution backdoor

Details:
Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the ___cfduid cookie value with base64 arbitrary code to be executed via eval(), which can be leveraged to execute arbitrary code on the target system. Note that there are three underscore characters in the cookie name. This is unrelated to the __cfduid cookie that is legitimately used by Cloudflare.
GitHub Security Advisory: GHSA-xrr6-3pc4-m447
Package: activerecord (RUBYGEMS)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: = 5.0.0.beta1
Patched in: 5.0.0.beta1.1

Summary: Active Record Improper Access Control

Details:
`activerecord/lib/active_record/nested_attributes.rb` in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly implement a certain destroy option, which allows remote attackers to bypass intended change restrictions by leveraging use of the nested attributes feature.
GitHub Security Advisory: GHSA-xrr6-3pc4-m447
Package: activerecord (RUBYGEMS)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 4.2.0, < 4.2.5.1
Patched in: 4.2.5.1

Summary: Active Record Improper Access Control

Details:
`activerecord/lib/active_record/nested_attributes.rb` in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly implement a certain destroy option, which allows remote attackers to bypass intended change restrictions by leveraging use of the nested attributes feature.
GitHub Security Advisory: GHSA-xrr6-3pc4-m447
Package: activerecord (RUBYGEMS)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 4.0.0, <= 4.1.14.0
Patched in: 4.1.14.1

Summary: Active Record Improper Access Control

Details:
`activerecord/lib/active_record/nested_attributes.rb` in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly implement a certain destroy option, which allows remote attackers to bypass intended change restrictions by leveraging use of the nested attributes feature.
GitHub Security Advisory: GHSA-xrr6-3pc4-m447
Package: activerecord (RUBYGEMS)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 3.1.0, <= 3.2.22.0
Patched in: 3.2.22.1

Summary: Active Record Improper Access Control

Details:
`activerecord/lib/active_record/nested_attributes.rb` in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly implement a certain destroy option, which allows remote attackers to bypass intended change restrictions by leveraging use of the nested attributes feature.
GitHub Security Advisory: GHSA-cff7-6h4q-q5pj
Package: json-jwt (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-287: Improper Authentication
Vulnerable versions: < 1.11.0
Patched in: 1.11.0

Summary: JSON-jwt Gem lacked element count during splitting of JWE string

Details:
The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.
GitHub Security Advisory: GHSA-85r7-w5mv-c849
Package: rack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 1.4.0, < 1.4.5
Patched in: 1.4.5

Summary: Rack Vulnerable to Path Traversal

Details:
`rack/file.rb` (`Rack::File`) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted `PATH_INFO` environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."
GitHub Security Advisory: GHSA-85r7-w5mv-c849
Package: rack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 1.5.0, < 1.5.2
Patched in: 1.5.2

Summary: Rack Vulnerable to Path Traversal

Details:
`rack/file.rb` (`Rack::File`) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted `PATH_INFO` environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."
GitHub Security Advisory: GHSA-hgpp-pp89-4fgf
Package: actionpack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 3.2.0, < 3.2.4
Patched in: 3.2.4

Summary: Action Pack contains database-query restrictions bypass

Details:
`actionpack/lib/action_dispatch/http/request.rb` in Ruby on Rails before 2.3.16, 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain `[nil]` values, a related issue to CVE-2012-2694.
GitHub Security Advisory: GHSA-hgpp-pp89-4fgf
Package: actionpack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 3.1.0, < 3.1.5
Patched in: 3.1.5

Summary: Action Pack contains database-query restrictions bypass

Details:
`actionpack/lib/action_dispatch/http/request.rb` in Ruby on Rails before 2.3.16, 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain `[nil]` values, a related issue to CVE-2012-2694.
GitHub Security Advisory: GHSA-h77x-m5q8-c29h
Package: rack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
Vulnerable versions: >= 1.4.0, < 1.4.2
Patched in: 1.4.2

Summary: Rack vulnerable to REDoS

Details:
`lib/rack/multipart.rb` in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.
GitHub Security Advisory: GHSA-h77x-m5q8-c29h
Package: rack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
Vulnerable versions: >= 1.3.0, < 1.3.7
Patched in: 1.3.7

Summary: Rack vulnerable to REDoS

Details:
`lib/rack/multipart.rb` in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.
GitHub Security Advisory: GHSA-h77x-m5q8-c29h
Package: rack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
Vulnerable versions: >= 1.2.0, < 1.2.6
Patched in: 1.2.6

Summary: Rack vulnerable to REDoS

Details:
`lib/rack/multipart.rb` in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.
GitHub Security Advisory: GHSA-h77x-m5q8-c29h
Package: rack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
Vulnerable versions: < 1.1.4
Patched in: 1.1.4

Summary: Rack vulnerable to REDoS

Details:
`lib/rack/multipart.rb` in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.
GitHub Security Advisory: GHSA-hrp6-w4v2-8737
Package: rack-cache (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-525: Use of Web Browser Cache Containing Sensitive Information
Vulnerable versions: >= 0.3.0, < 1.2
Patched in: 1.2

Summary: Rack-Cache caches sensitive headers

Details:
The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie and other sensitive headers, which allows attackers to obtain sensitive cookie information, hijack web sessions, or have other unspecified impact by accessing the cache.
GitHub Security Advisory: GHSA-3crr-9vmg-864v
Package: activerecord (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-20: Improper Input Validation
Vulnerable versions: >= 3.2.0, < 3.2.13
Patched in: 3.2.13

Summary: Active Record Improper Input Validation

Details:
The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x before 3.1.12, and 3.2.x before 3.2.13 processes certain queries by converting hash keys to symbols, which allows remote attackers to cause a denial of service via crafted input to a where method.
GitHub Security Advisory: GHSA-3crr-9vmg-864v
Package: activerecord (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-20: Improper Input Validation
Vulnerable versions: >= 3.1.0, < 3.1.12
Patched in: 3.1.12

Summary: Active Record Improper Input Validation

Details:
The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x before 3.1.12, and 3.2.x before 3.2.13 processes certain queries by converting hash keys to symbols, which allows remote attackers to cause a denial of service via crafted input to a where method.
GitHub Security Advisory: GHSA-3crr-9vmg-864v
Package: activerecord (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-20: Improper Input Validation
Vulnerable versions: >= 2.3.0, < 2.3.18
Patched in: 2.3.18

Summary: Active Record Improper Input Validation

Details:
The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x before 3.1.12, and 3.2.x before 3.2.13 processes certain queries by converting hash keys to symbols, which allows remote attackers to cause a denial of service via crafted input to a where method.
GitHub Security Advisory: GHSA-gppp-5xc5-wfpx
Package: activerecord (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 3.2.0, < 3.2.11
Patched in: 3.2.11

Summary: Active Record allows bypassing of database-query restrictions

Details:
Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2660 and CVE-2012-2694.
GitHub Security Advisory: GHSA-gppp-5xc5-wfpx
Package: activerecord (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 3.1.0, < 3.1.10
Patched in: 3.1.10

Summary: Active Record allows bypassing of database-query restrictions

Details:
Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2660 and CVE-2012-2694.
GitHub Security Advisory: GHSA-gppp-5xc5-wfpx
Package: activerecord (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 3.0.0, < 3.0.19
Patched in: 3.0.19

Summary: Active Record allows bypassing of database-query restrictions

Details:
Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2660 and CVE-2012-2694.
GitHub Security Advisory: GHSA-v6j3-7jrw-hq2p
Package: rack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-328: Use of Weak Hash, CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: >= 1.3.0, < 1.3.6
Patched in: 1.3.6

Summary: Rack Gem Subject to Denial of Service via Hash Collisions

Details:
Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
GitHub Security Advisory: GHSA-v6j3-7jrw-hq2p
Package: rack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-328: Use of Weak Hash, CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: >= 1.2.0, < 1.2.5
Patched in: 1.2.5

Summary: Rack Gem Subject to Denial of Service via Hash Collisions

Details:
Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
GitHub Security Advisory: GHSA-v6j3-7jrw-hq2p
Package: rack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-328: Use of Weak Hash, CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: < 1.1.3
Patched in: 1.1.3

Summary: Rack Gem Subject to Denial of Service via Hash Collisions

Details:
Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
GitHub Security Advisory: GHSA-959j-5g9v-3fpq
Package: paratrooper-newrelic (RUBYGEMS)
Severity: LOW (CVSS 0.0)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: <= 1.0.1
Patched in: unpatched

Summary: Paratrooper-newrelic Exposes of Sensitive Information to an Unauthorized Actor

Details:
The paratrooper-newrelic gem 1.0.1 for Ruby allows local users to obtain the X-Api-Key value by listing the curl process.
GitHub Security Advisory: GHSA-9rf5-jm6f-2fmm
Package: activerecord (RUBYGEMS)
Severity: HIGH (CVSS 0.0)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 4.1.0, < 4.1.5
Patched in: 4.1.5

Summary: Active Record subject to strong parameters protection bypass

Details:
`activerecord/lib/active_record/relation/query_methods.rb` in Active Record in Ruby on Rails 4.0.x before 4.0.9 and 4.1.x before 4.1.5 allows remote attackers to bypass the strong parameters protection mechanism via crafted input to an application that makes `create_with` calls.
GitHub Security Advisory: GHSA-9rf5-jm6f-2fmm
Package: activerecord (RUBYGEMS)
Severity: HIGH (CVSS 0.0)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 4.0.0, < 4.0.9
Patched in: 4.0.9

Summary: Active Record subject to strong parameters protection bypass

Details:
`activerecord/lib/active_record/relation/query_methods.rb` in Active Record in Ruby on Rails 4.0.x before 4.0.9 and 4.1.x before 4.1.5 allows remote attackers to bypass the strong parameters protection mechanism via crafted input to an application that makes `create_with` calls.
GitHub Security Advisory: GHSA-r8fh-hq2p-7qhq
Package: activerecord (RUBYGEMS)
Severity: HIGH (CVSS 0.0)
CWE: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Vulnerable versions: >= 4.1.0, < 4.1.3
Patched in: 4.1.3

Summary: Active Record contains SQL Injection via improper range quoting

Details:
SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by leveraging improper range quoting.
GitHub Security Advisory: GHSA-r8fh-hq2p-7qhq
Package: activerecord (RUBYGEMS)
Severity: HIGH (CVSS 0.0)
CWE: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Vulnerable versions: >= 4.0.0, < 4.0.7
Patched in: 4.0.7

Summary: Active Record contains SQL Injection via improper range quoting

Details:
SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by leveraging improper range quoting.
GitHub Security Advisory: GHSA-wp3j-rvfp-624h
Package: rubygems-update (RUBYGEMS)
Severity: HIGH (CVSS 0.0)
CWE: CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action
Vulnerable versions: >= 2.4.0, < 2.4.7
Patched in: 2.4.7

Summary: RubyGems vulnerable to DNS hijack attack

Details:
RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a "DNS hijack attack."
GitHub Security Advisory: GHSA-wp3j-rvfp-624h
Package: rubygems-update (RUBYGEMS)
Severity: HIGH (CVSS 0.0)
CWE: CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action
Vulnerable versions: >= 2.2.0, < 2.2.4
Patched in: 2.2.4

Summary: RubyGems vulnerable to DNS hijack attack

Details:
RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a "DNS hijack attack."
GitHub Security Advisory: GHSA-wp3j-rvfp-624h
Package: rubygems-update (RUBYGEMS)
Severity: HIGH (CVSS 0.0)
CWE: CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action
Vulnerable versions: >= 2.0.0, < 2.0.16
Patched in: 2.0.16

Summary: RubyGems vulnerable to DNS hijack attack

Details:
RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a "DNS hijack attack."
GitHub Security Advisory: GHSA-99ch-8mvp-g7m5
Package: md2pdf (RUBYGEMS)
Severity: CRITICAL (CVSS 0.0)
Vulnerable versions: <= 0.0.1
Patched in: unpatched

Summary: md2pdf allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename

Details:
`converter.rb` in the md2pdf gem 0.0.1 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.
GitHub Security Advisory: GHSA-v6fx-752r-ccp2
Package: pghero (RUBYGEMS)
Severity: HIGH (CVSS 8.1)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: < 2.7.0
Patched in: 2.7.0

Summary: PgHero gem allows CSRF

Details:
The PgHero gem through 2.6.0 for Ruby allows CSRF. PgHero normally uses the `protect_from_forgery` method from Rails to prevent CSRF. However, this defaults to `:null_session`, which has no effect on non-session based authentication methods. Thus the ruby gem is vulnerable with non-session based authentication methods like basic authentication.
GitHub Security Advisory: GHSA-72rj-36qc-47g7
Package: pgsync (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-319: Cleartext Transmission of Sensitive Information
Vulnerable versions: < 0.6.7
Patched in: 0.6.7

Summary: Pgsync Contains Cleartext Transmission of Sensitive Information

Details:
pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the `--schema-first` and `--schema-only` options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used.