Sources:
amazon_linux
archlinux
azure_linux
bitnami_vulndb
capec
capec_enrichment_dashboard
certeu
certfr
circl_kev
cisa_known_exploited
cna_scorecard
cnvd
csaf_abb
csaf_adstecindustrialitgmbh
csaf_amd
csaf_aumariestergmbhcokg
csaf_baadem2mproductsgmbh
csaf_beckhoffautomationgmbhcokg
csaf_bendergmbhcokg
csaf_bosch
csaf_bsi
csaf_bsi_aggregator
csaf_bsi_cvd_white
csaf_bsi_white
csaf_bsi_wid_white
csaf_carlogavazziautomation
csaf_certbund
csaf_certvde
csaf_cisa
csaf_cisa_it
csaf_cisa_ot
csaf_cisco
csaf_claaskgaa
csaf_codesysgmbh
csaf_dell
csaf_duraggmbh
csaf_endresshauserag
csaf_ericsson
csaf_euchnergmbhcokg
csaf_festosecokg
csaf_frauschersensortechnikgmbh
csaf_hancom
csaf_harmaninternational
csaf_helmholzgmbhcokg
csaf_himapaulhildebrandtgmbh
csaf_hitachi
csaf_hpe
csaf_huawei
csaf_hydacinternationalgmbh
csaf_ibm
csaf_ifmelectronicgmbh
csaf_janitzaelectronicsgmbh
csaf_jumogmbhcokg
csaf_juniper
csaf_kebautomationkg
csaf_kukaag
csaf_lenovo
csaf_lenzese
csaf_mbconnectlinegmbh
csaf_mettlertoledogmbh
csaf_metzconnectgmbh
csaf_microsoft
csaf_mieleciekg
csaf_moxa
csaf_murrelektronikgmbh
csaf_ncscnl
csaf_ndaal
csaf_netapp
csaf_nozomi
csaf_nozominetworks
csaf_nvidia
csaf_opcfoundation
csaf_openeuler
csaf_opensuse
csaf_oracle
csaf_ox
csaf_paloalto
csaf_panasonic
csaf_pentagrid
csaf_pepperlfuchsse
csaf_phoenix
csaf_pilzgmbhcokg
csaf_qnap
csaf_redhat
csaf_samsung
csaf_sauterag
csaf_schneider
csaf_sick
csaf_siemens
csaf_smasolartechnologyag
csaf_suse
csaf_swarcotrafficsystemsgmbh
csaf_synology
csaf_tibco
csaf_trend
csaf_trumpfsecokg
csaf_trustsource
csaf_tuxcare
csaf_ubiquiti
csaf_vartastoragegmbh
csaf_vegagrieshaberkg
csaf_vmware
csaf_wagogmbhcokg
csaf_weidmuellerinterfacegmbhcokg
csaf_welotecgmbh
csaf_wiesemanntheisgmbh
csaf_yaskawaeuropegmbh
csaf_yokogawa
csaf_zyxel
cve_forecast
cve_icu
cve_vs_github_dashboard
cvelistv5
cwe_dashboard
cwe_enrichment
cwec
debian_rustsec
debian_security_tracker
drupal
emb3d
emb3d_dashboard
epss_dashboard
epss_history
epss_kev_enrichment
euvd_kev
fedora
fkie_nvd
freebsd
gcve
gcve_enriched
gcve_enrichment
gcve_enrichment_dashboard
gentoo
github
gsd
jvn
kev_ransomware
mitre_attack
moksha
ndaal_kev
netbsd
nuclei_dashboard
nuclei_enrichment
nvd
nvd_cpe_dictionary
openbsd
opencve
oracle_linux
ossf_malicious_packages
osv_almalinux
osv_alpine
osv_android
osv_bellsoft
osv_chainguard
osv_cran
osv_github_actions
osv_golang
osv_haskell
osv_hex
osv_linux
osv_maven
osv_npm
osv_nuget
osv_ocaml
osv_ossfuzz
osv_packagist
osv_pub
osv_rocky
osv_rubygems
osv_rustsec
osv_swift
osv_ubuntu
osv_wolfi
publish_stats
pysec
sadp_pilot
ssvc
ssvc_dashboard
tailscale
tsunami_enrichment
variot
vulncheck_kev
vulnrichment
Clear
| ID | Title | Severity | CVSS | Source | Updated |
|---|---|---|---|---|---|
| mal-2026-18599 | Malicious code in w002yardprobe (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| mal-2026-18598 | Malicious code in brida-frida-hooks (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| mal-2026-18518 | Malicious code in dopc-client (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| ghsa-qpgp-93vx-g8v8 | Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion | UNKNOWN | 7.5 | ghsa | unknown |
| ghsa-2vqw-3mp8-cgmx | Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections | UNKNOWN | 7.5 | ghsa | unknown |
| mal-2026-18462 | Malicious code in intercom-react-native-example-e2e-tests (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| mal-2026-18461 | Malicious code in shoaib-unity (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| ghsa-2x63-gw47-w4mm | websocket-driver-ruby: Denial of service via malformed Host header | UNKNOWN | 8.9 | ghsa | unknown |
| mal-2026-18436 | Malicious code in macs-shoaibs-pro17 (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| ghsa-wwpr-jff3-395c | Crass: A large number of adjacent CSS comments can trigger a SystemStackError | UNKNOWN | 6.3 | ghsa | unknown |
| ghsa-6jxj-px6v-747w | Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage | UNKNOWN | 6.3 | ghsa | unknown |
| ghsa-6j52-38f8-qhxr | Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps | UNKNOWN | 7.6 | ghsa | unknown |
| ghsa-8vfg-2r28-hvhj | Crass: Non-ASCII characters cause superlinear CPU consumption | UNKNOWN | 6.3 | ghsa | unknown |
| ghsa-pq4g-8rxf-4g29 | Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass | UNKNOWN | 5.3 | ghsa | unknown |
| ghsa-7pwq-q9jf-539h | kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service) | UNKNOWN | 10.0 | ghsa | unknown |
| mal-2026-18126 | Malicious code in zzhelloworld_socktest (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| ghsa-6wmf-3r64-vcwv | Crass : Large numeric exponents cause CPU and memory denial of service | UNKNOWN | 8.9 | ghsa | unknown |
| ghsa-35jh-r3h4-6jhm | Command Injection in lodash | UNKNOWN | 7.2 | ghsa | unknown |
| mal-2026-17798 | Malicious code in tron-trc20-utils (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| mal-2026-17797 | Malicious code in ton-jetton-tools (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| mal-2026-17796 | Malicious code in staking-apr-fetcher (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| mal-2026-17795 | Malicious code in sol-mint-utils (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| mal-2026-17794 | Malicious code in seed-phrase-validator (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| mal-2026-17789 | Malicious code in hd-wallet-generator (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| mal-2026-17787 | Malicious code in evm-tx-decoder (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| mal-2026-17802 | Malicious code in xrp-ledger-utils (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| mal-2026-17800 | Malicious code in wallet-hd-derive (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| mal-2026-17799 | Malicious code in wallet-balance-scanner (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| mal-2026-17793 | Malicious code in perp-funding-rates (RubyGems) | UNKNOWN | osv_rubygems | unknown | |
| mal-2026-17792 | Malicious code in nft-metadata-resolver (RubyGems) | UNKNOWN | osv_rubygems | unknown |