Ruby Lang Rdoc vulnerabilities

2 vulnerabilities

Known vulnerabilities in Ruby Lang Rdoc, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2013-0256canonicalubuntu_linux+19
EPSS score
2.99%
darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.7CVE-2021-31799alpineruby+8
EPSS score
1.48%
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.