RHSA-2025:7539: ruby Red Hat

CVSS: 7.5v3.1HighPublished

Published 14-05-2025Last modified 07-08-2026

Open JSON

Vulnerability summary

RHSA-2025:7539 is a high (CVSS 7.5) vulnerability in ruby Red Hat.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 2 · Downstream 0

CVE-2019-19012 CVE-2021-43809

Timeline

14-05-2025
PublishedVulnerability first disclosed.
07-08-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: ruby:2.5 security update

CVSS metrics

1 score · 1 source · 1 version

v3.17.5

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat46 products

ruby< 0:2.5.9-114.module+el8.10.0+23088+750dc6ca
ruby-debuginfo< 0:2.5.9-114.module+el8.10.0+23088+750dc6ca
ruby-debugsource< 0:2.5.9-114.module+el8.10.0+23088+750dc6ca
ruby-devel< 0:2.5.9-114.module+el8.10.0+23088+750dc6ca
ruby-doc< 0:2.5.9-114.module+el8.10.0+23088+750dc6ca

ruby-irb< 0:2.5.9-114.module+el8.10.0+23088+750dc6ca
ruby-libs< 0:2.5.9-114.module+el8.10.0+23088+750dc6ca
ruby-libs-debuginfo< 0:2.5.9-114.module+el8.10.0+23088+750dc6ca
rubygem-abrt< 0:0.3.0-4.module+el8.10.0+22021+135c76a8
rubygem-abrt-doc< 0:0.3.0-4.module+el8.10.0+22021+135c76a8
rubygem-bigdecimal< 0:1.3.4-114.module+el8.10.0+23088+750dc6ca
rubygem-bigdecimal-debuginfo< 0:1.3.4-114.module+el8.10.0+23088+750dc6ca
rubygem-bson< 0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bson-debuginfo< 0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bson-debugsource< 0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bson-doc< 0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bundler< 0:1.16.1-5.module+el8.10.0+23088+750dc6ca
rubygem-bundler-doc< 0:1.16.1-5.module+el8.10.0+23088+750dc6ca
rubygem-did_you_mean< 0:1.2.0-114.module+el8.10.0+23088+750dc6ca
rubygem-io-console< 0:0.4.6-114.module+el8.10.0+23088+750dc6ca
rubygem-io-console-debuginfo< 0:0.4.6-114.module+el8.10.0+23088+750dc6ca
rubygem-json< 0:2.1.0-114.module+el8.10.0+23088+750dc6ca
rubygem-json-debuginfo< 0:2.1.0-114.module+el8.10.0+23088+750dc6ca
rubygem-minitest< 0:5.10.3-114.module+el8.10.0+23088+750dc6ca
rubygem-mongo< 0:2.5.1-2.module+el8.9.0+19193+435404ae
rubygem-mongo-doc< 0:2.5.1-2.module+el8.9.0+19193+435404ae
rubygem-mysql2< 0:0.4.10-4.module+el8.9.0+19193+435404ae
rubygem-mysql2-debuginfo< 0:0.4.10-4.module+el8.9.0+19193+435404ae
rubygem-mysql2-debugsource< 0:0.4.10-4.module+el8.9.0+19193+435404ae
rubygem-mysql2-doc< 0:0.4.10-4.module+el8.9.0+19193+435404ae
rubygem-net-telnet< 0:0.1.1-114.module+el8.10.0+23088+750dc6ca
rubygem-openssl< 0:2.1.2-114.module+el8.10.0+23088+750dc6ca
rubygem-openssl-debuginfo< 0:2.1.2-114.module+el8.10.0+23088+750dc6ca
rubygem-pg< 0:1.0.0-3.module+el8.9.0+19193+435404ae
rubygem-pg-debuginfo< 0:1.0.0-3.module+el8.9.0+19193+435404ae
rubygem-pg-debugsource< 0:1.0.0-3.module+el8.9.0+19193+435404ae
rubygem-pg-doc< 0:1.0.0-3.module+el8.9.0+19193+435404ae
rubygem-power_assert< 0:1.1.1-114.module+el8.10.0+23088+750dc6ca
rubygem-psych< 0:3.0.2-114.module+el8.10.0+23088+750dc6ca
rubygem-psych-debuginfo< 0:3.0.2-114.module+el8.10.0+23088+750dc6ca
rubygem-rake< 0:12.3.3-114.module+el8.10.0+23088+750dc6ca
rubygem-rdoc< 0:6.0.1.1-114.module+el8.10.0+23088+750dc6ca
rubygem-test-unit< 0:3.2.7-114.module+el8.10.0+23088+750dc6ca
rubygem-xmlrpc< 0:0.3.0-114.module+el8.10.0+23088+750dc6ca
rubygems< 0:2.7.6.3-114.module+el8.10.0+23088+750dc6ca
rubygems-devel< 0:2.7.6.3-114.module+el8.10.0+23088+750dc6ca

Show all 46

1 vendor · 46 products

References

11 links

Show all 11 references

nvd.nist.gov/vuln/detail/CVE-2021-43809Advisory