Vendor/product archive

ruby-lang / rdoc CVEs

Beta · best-effort

2 CVEs tagged to ruby-lang / rdoc — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to ruby-lang vendor archive

CVE-2021-31799

Published Jul 30, 2021

In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.

CVSS 7.0 · High

Vendor/product tagsBeta · best-effort

CVE-2013-0256

Published Mar 1, 2013

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1