Search CVE reports
11 – 11 of 11 results
Some fixes available 2 of 20
RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote attackers to observe or modify a gem during installation via a man-in-the-middle attack.
3 affected packages
jruby, ruby1.9.1, rubygems
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| jruby | Not affected | Not affected | — | Not affected | Not affected |
| ruby1.9.1 | Not in release | Not in release | Not in release | Not in release | Not in release |
| rubygems | Not affected | Not affected | Not affected | Not in release | Not in release |