RubyGems - OSV

MAL-2026-18462

RubyGems/intercom-react-native-example-e2e-tests

Malicious code in intercom-react-native-example-e2e-tests (RubyGems) 36 minutes ago

No fix available

MAL-2026-18461

RubyGems/shoaib-unity

Malicious code in shoaib-unity (RubyGems) 1 hour ago

No fix available

MAL-2026-18436

RubyGems/macs-shoaibs-pro17

Malicious code in macs-shoaibs-pro17 (RubyGems) yesterday

No fix available

GHSA-6j52-38f8-qhxr

RubyGems/shopify_app

Shopify App: Token exchange shop context confusion may allow cross-shop... 3 days ago

Fix available
Severity - 7.6 (High)

GHSA-8vfg-2r28-hvhj

RubyGems/crass

Crass: Non-ASCII characters cause superlinear CPU consumption 3 days ago

Fix available
Severity - 6.3 (Medium)

GHSA-wwpr-jff3-395c

RubyGems/crass

Crass: A large number of adjacent CSS comments can trigger a SystemStackError 3 days ago

Fix available
Severity - 6.3 (Medium)

GHSA-6jxj-px6v-747w

RubyGems/crass

Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or... 3 days ago

Fix available
Severity - 6.3 (Medium)

GHSA-pq4g-8rxf-4g29

RubyGems/crass

Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass 4 days ago

Fix available
Severity - 5.3 (Medium)

MAL-2026-18126

RubyGems/zzhelloworld_socktest

Malicious code in zzhelloworld_socktest (RubyGems) 21 Oct

No fix available

GHSA-6wmf-3r64-vcwv

RubyGems/crass

Crass : Large numeric exponents cause CPU and memory denial of service 20 Oct

Fix available
Severity - 8.9 (High)

MAL-2026-17786

RubyGems/eth-gas-oracle

Malicious code in eth-gas-oracle (RubyGems) 11 Oct

No fix available

MAL-2026-17791

RubyGems/multichain-rpc

Malicious code in multichain-rpc (RubyGems) 11 Oct

No fix available

MAL-2026-17801

RubyGems/web3-signer-kit

Malicious code in web3-signer-kit (RubyGems) 11 Oct

No fix available

MAL-2026-17790

RubyGems/mev-sandwich-detect

Malicious code in mev-sandwich-detect (RubyGems) 11 Oct

No fix available

MAL-2026-17782

RubyGems/crypto-tax-export

Malicious code in crypto-tax-export (RubyGems) 11 Oct

No fix available

MAL-2026-17779

RubyGems/airdrop-eligibility-check

Malicious code in airdrop-eligibility-check (RubyGems) 11 Oct

No fix available

Vulnerabilities