ruby
Security Risk Profile
59
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 74 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 1, 2007 to present
74
Total CVEs
5
Critical+High
0
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
3.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
59/100
medium
📈 1 in Last 30 Days
Severity Distribution
Critical
2High
3Medium
26Low
12Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
5Age Distribution
Common Weaknesses (CWE)
1
Race Condition
3
2
Use After Free
2
3
Buffer Overflow
2
4
Weak Encryption
1
5
Input Validation
1
Most Affected Products
1. Ruby Ruby45
2. Ruby WEBrick8
3. Ruby REXML5
4. Ruby json gem4
5. OmniAuth Omniauth Saml Ruby3
Recent Vulnerabilities
See more →CVE-2026-46727
CVSS 8.1high
5/22/2026🔧 No Patch
EOL-ruby-4.0
unknown
12/25/2025
CVE-2025-58767
CVSS 1.2low
REXML has a DoS condition when parsing malformed XML file
9/17/2025
CVE-2025-45765
CVSS 9.1critical
8/7/2025🔧 No Patch
CVE-2025-6442
CVSS 5.9EPSS 0%medium
Ruby WEBrick read_header HTTP Request Smuggling Vulnerability
6/25/2025
ZDI-25-414
CVSS 6.5medium
Ruby WEBrick read_header HTTP Request Smuggling Vulnerability
6/23/2025🔧 No Patch
ZDI-CAN-21876
CVSS 6.5medium
ZDI-25-414: Ruby WEBrick read_header HTTP Request Smuggling Vulnerability
6/23/2025🔧 No Patch
USN-7418-1
unknown
Ruby vulnerabilities
4/7/2025🔧 No Patch
CVE-2025-25292
CVSS 9.8EPSS 0%critical
GHSL-2024-329_GHSL-2024-330: Authentication bypasses in ruby-saml - CVE-2025-25291, CVE-2025-25292
3/12/2025
CVE-2025-27788
CVSS 7.5EPSS 0%high
Ruby JSON Parser has Out-of-bounds Read
3/12/2025
Monitor ruby in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.