Vulnerable packages
Packages
Reverse lookup: every package coordinate seen in a CVE's affected list. Click a row to see every CVE that mentions it — with affected version range, fixed-in version, severity, and KEV status.
Sort by:
| # | Ecosystem | Package | CVEs | Latest CVE | purl |
|---|---|---|---|---|---|
| 1 | gem | actionpack | 63 | Mar 23, 2026 | pkg:gem/actionpack |
| 2 | gem | rack | 50 | Apr 2, 2026 | pkg:gem/rack |
| 3 | gem | nokogiri | 34 | Jun 22, 2025 | pkg:gem/nokogiri |
| 4 | gem | rubygems-update | 25 | Jun 17, 2019 | pkg:gem/rubygems-update |
| 5 | gem | activerecord | 23 | Aug 13, 2025 | pkg:gem/activerecord |
| 6 | gem | puppet | 23 | Nov 18, 2021 | pkg:gem/puppet |
| 7 | gem | activesupport | 17 | Mar 23, 2026 | pkg:gem/activesupport |
| 8 | gem | publify_core | 15 | Mar 28, 2025 | pkg:gem/publify_core |
| 9 | gem | passenger | 14 | Feb 24, 2025 | pkg:gem/passenger |
| 10 | gem | rails-html-sanitizer | 14 | Dec 2, 2024 | pkg:gem/rails-html-sanitizer |
| 11 | gem | actionview | 13 | Mar 23, 2026 | pkg:gem/actionview |
| 12 | gem | decidim | 12 | Feb 3, 2026 | pkg:gem/decidim |
| 13 | gem | puma | 12 | Sep 19, 2024 | pkg:gem/puma |
| 14 | gem | camaleon_cms | 11 | Mar 10, 2026 | pkg:gem/camaleon_cms |
| 15 | gem | fat_free_crm | 11 | Oct 8, 2022 | pkg:gem/fat_free_crm |
| 16 | gem | rails | 11 | Feb 27, 2024 | pkg:gem/rails |
| 17 | gem | activestorage | 10 | Mar 26, 2026 | pkg:gem/activestorage |
| 18 | gem | ruby-saml | 10 | Dec 9, 2025 | pkg:gem/ruby-saml |
| 19 | gem | jquery-rails | 9 | May 19, 2020 | pkg:gem/jquery-rails |
| 20 | gem | openc3 | 8 | May 4, 2026 | pkg:gem/openc3 |
| 21 | gem | rexml | 8 | Sep 17, 2025 | pkg:gem/rexml |
| 22 | gem | bootstrap | 7 | Feb 20, 2019 | pkg:gem/bootstrap |
| 23 | gem | bootstrap-sass | 7 | Apr 4, 2019 | pkg:gem/bootstrap-sass |
| 24 | gem | jquery-ui-rails | 7 | Jul 20, 2022 | pkg:gem/jquery-ui-rails |
| 25 | gem | katello | 7 | Mar 17, 2026 | pkg:gem/katello |
| 26 | gem | lodash-rails | 7 | Feb 15, 2021 | pkg:gem/lodash-rails |
| 27 | gem | net-imap | 7 | May 9, 2026 | pkg:gem/net-imap |
| 28 | gem | spree | 7 | Aug 20, 2025 | pkg:gem/spree |
| 29 | gem | avo | 6 | May 8, 2026 | pkg:gem/avo |
| 30 | gem | decidim-core | 6 | Apr 21, 2026 | pkg:gem/decidim-core |
| 31 | gem | devise | 6 | May 8, 2026 | pkg:gem/devise |
| 32 | gem | doorkeeper | 6 | Jun 12, 2023 | pkg:gem/doorkeeper |
| 33 | gem | ember-source | 6 | Jun 30, 2022 | pkg:gem/ember-source |
| 34 | gem | loofah | 6 | Dec 14, 2022 | pkg:gem/loofah |
| 35 | gem | sinatra | 6 | Oct 10, 2025 | pkg:gem/sinatra |
| 36 | gem | webrick | 6 | Jun 25, 2025 | pkg:gem/webrick |
| 37 | gem | bundler | 5 | Dec 8, 2021 | pkg:gem/bundler |
| 38 | gem | cgi | 5 | Mar 3, 2025 | pkg:gem/cgi |
| 39 | gem | grpc | 5 | Sep 13, 2023 | pkg:gem/grpc |
| 40 | gem | sidekiq | 5 | Apr 26, 2024 | pkg:gem/sidekiq |
| 41 | gem | carrierwave | 4 | Mar 24, 2024 | pkg:gem/carrierwave |
| 42 | gem | dragonfly | 4 | Jun 2, 2022 | pkg:gem/dragonfly |
| 43 | gem | json | 4 | Mar 20, 2026 | pkg:gem/json |
| 44 | gem | 4 | Jun 12, 2017 | pkg:gem/mail | |
| 45 | gem | rails_admin | 4 | Jul 8, 2024 | pkg:gem/rails_admin |
| 46 | gem | sanitize | 4 | Jul 6, 2023 | pkg:gem/sanitize |
| 47 | gem | uri | 4 | Dec 30, 2025 | pkg:gem/uri |
| 48 | gem | view_component | 4 | May 8, 2026 | pkg:gem/view_component |
| 49 | gem | yard | 4 | May 8, 2026 | pkg:gem/yard |
| 50 | gem | actiontext | 3 | Oct 16, 2024 | pkg:gem/actiontext |
| 51 | gem | activeadmin | 3 | Jun 3, 2024 | pkg:gem/activeadmin |
| 52 | gem | chartkick | 3 | Aug 5, 2020 | pkg:gem/chartkick |
| 53 | gem | decidim-admin | 3 | Sep 16, 2024 | pkg:gem/decidim-admin |
| 54 | gem | devise-two-factor | 3 | Sep 17, 2024 | pkg:gem/devise-two-factor |
| 55 | gem | fluentd | 3 | Nov 2, 2022 | pkg:gem/fluentd |
| 56 | gem | geminabox | 3 | Nov 13, 2017 | pkg:gem/geminabox |
| 57 | gem | git | 3 | Jan 17, 2023 | pkg:gem/git |
| 58 | gem | gollum | 3 | Jul 15, 2022 | pkg:gem/gollum |
| 59 | gem | google-protobuf | 3 | Sep 19, 2024 | pkg:gem/google-protobuf |
| 60 | gem | httparty | 3 | Dec 23, 2025 | pkg:gem/httparty |
| 61 | gem | json-jwt | 3 | Dec 25, 2023 | pkg:gem/json-jwt |
| 62 | gem | omniauth | 3 | Aug 18, 2022 | pkg:gem/omniauth |
| 63 | gem | openssl | 3 | Nov 16, 2018 | pkg:gem/openssl |
| 64 | gem | phlex | 3 | Apr 30, 2024 | pkg:gem/phlex |
| 65 | gem | private_address_check | 3 | Jun 13, 2018 | pkg:gem/private_address_check |
| 66 | gem | rack-cors | 3 | Feb 26, 2024 | pkg:gem/rack-cors |
| 67 | gem | rdoc | 3 | May 14, 2024 | pkg:gem/rdoc |
| 68 | gem | resque | 3 | Dec 22, 2023 | pkg:gem/resque |
| 69 | gem | rest-client | 3 | Aug 19, 2019 | pkg:gem/rest-client |
| 70 | gem | rubyzip | 3 | Sep 25, 2019 | pkg:gem/rubyzip |
| 71 | gem | spina | 3 | Jul 25, 2024 | pkg:gem/spina |
| 72 | gem | spree_api | 3 | Feb 6, 2026 | pkg:gem/spree_api |
| 73 | gem | actionmailer | 2 | Oct 16, 2024 | pkg:gem/actionmailer |
| 74 | gem | addressable | 2 | Apr 7, 2026 | pkg:gem/addressable |
| 75 | gem | administrate | 2 | Aug 5, 2022 | pkg:gem/administrate |
| 76 | gem | alchemy_cms | 2 | Jan 19, 2026 | pkg:gem/alchemy_cms |
| 77 | gem | bson | 2 | Feb 20, 2020 | pkg:gem/bson |
| 78 | gem | bsv-sdk | 2 | Apr 9, 2026 | pkg:gem/bsv-sdk |
| 79 | gem | cocoapods-downloader | 2 | Apr 1, 2022 | pkg:gem/cocoapods-downloader |
| 80 | gem | decidim-meetings | 2 | Nov 13, 2024 | pkg:gem/decidim-meetings |
| 81 | gem | decidim-templates | 2 | Feb 20, 2024 | pkg:gem/decidim-templates |
| 82 | gem | echor | 2 | Feb 2, 2018 | pkg:gem/echor |
| 83 | gem | facter | 2 | Feb 23, 2015 | pkg:gem/facter |
| 84 | gem | faye | 2 | Jul 31, 2020 | pkg:gem/faye |
| 85 | gem | field_test | 2 | Aug 5, 2020 | pkg:gem/field_test |
| 86 | gem | git-fastclone | 2 | Nov 3, 2016 | pkg:gem/git-fastclone |
| 87 | gem | google_sign_in | 2 | Aug 29, 2025 | pkg:gem/google_sign_in |
| 88 | gem | i18n | 2 | Nov 6, 2018 | pkg:gem/i18n |
| 89 | gem | iodine | 2 | Apr 22, 2026 | pkg:gem/iodine |
| 90 | gem | jruby-openssl | 2 | May 7, 2025 | pkg:gem/jruby-openssl |
| 91 | gem | kaminari | 2 | May 27, 2024 | pkg:gem/kaminari |
| 92 | gem | kramdown | 2 | Mar 19, 2021 | pkg:gem/kramdown |
| 93 | gem | logstash-core | 2 | Jun 16, 2017 | pkg:gem/logstash-core |
| 94 | gem | mapbox-rails | 2 | Jul 17, 2017 | pkg:gem/mapbox-rails |
| 95 | gem | mechanize | 2 | Jun 9, 2022 | pkg:gem/mechanize |
| 96 | gem | metasploit-framework | 2 | Feb 6, 2023 | pkg:gem/metasploit-framework |
| 97 | gem | mini_magick | 2 | Jul 12, 2019 | pkg:gem/mini_magick |
| 98 | gem | net-ldap | 2 | Nov 21, 2019 | pkg:gem/net-ldap |
| 99 | gem | omniauth-facebook | 2 | Dec 11, 2019 | pkg:gem/omniauth-facebook |
| 100 | gem | openc3-cosmos-tool-iframe | 2 | Jun 13, 2025 | pkg:gem/openc3-cosmos-tool-iframe |
- gemMar 23, 2026pkg:gem/actionpack
- gemApr 2, 2026pkg:gem/rack
- gemJun 22, 2025pkg:gem/nokogiri
- gemJun 17, 2019pkg:gem/rubygems-update
- gemAug 13, 2025pkg:gem/activerecord
- gemNov 18, 2021pkg:gem/puppet
- gemMar 23, 2026pkg:gem/activesupport
- gemMar 28, 2025pkg:gem/publify_core
- gemFeb 24, 2025pkg:gem/passenger
- gemDec 2, 2024pkg:gem/rails-html-sanitizer
- gemMar 23, 2026pkg:gem/actionview
- gemFeb 3, 2026pkg:gem/decidim
- gemSep 19, 2024pkg:gem/puma
- gemMar 10, 2026pkg:gem/camaleon_cms
- gemOct 8, 2022pkg:gem/fat_free_crm
- gemFeb 27, 2024pkg:gem/rails
- gemMar 26, 2026pkg:gem/activestorage
- gemDec 9, 2025pkg:gem/ruby-saml
- gemMay 19, 2020pkg:gem/jquery-rails
- gemMay 4, 2026pkg:gem/openc3
- gemSep 17, 2025pkg:gem/rexml
- gemFeb 20, 2019pkg:gem/bootstrap
- gemApr 4, 2019pkg:gem/bootstrap-sass
- gemJul 20, 2022pkg:gem/jquery-ui-rails
- gemMar 17, 2026pkg:gem/katello
- gemFeb 15, 2021pkg:gem/lodash-rails
- gemMay 9, 2026pkg:gem/net-imap
- gemAug 20, 2025pkg:gem/spree
- gemMay 8, 2026pkg:gem/avo
- gemApr 21, 2026pkg:gem/decidim-core
- gemMay 8, 2026pkg:gem/devise
- gemJun 12, 2023pkg:gem/doorkeeper
- gemJun 30, 2022pkg:gem/ember-source
- gemDec 14, 2022pkg:gem/loofah
- gemOct 10, 2025pkg:gem/sinatra
- gemJun 25, 2025pkg:gem/webrick
- gemDec 8, 2021pkg:gem/bundler
- gemMar 3, 2025pkg:gem/cgi
- gemSep 13, 2023pkg:gem/grpc
- gemApr 26, 2024pkg:gem/sidekiq
- gemMar 24, 2024pkg:gem/carrierwave
- gemJun 2, 2022pkg:gem/dragonfly
- gemMar 20, 2026pkg:gem/json
- gemJun 12, 2017pkg:gem/mail
- gemJul 8, 2024pkg:gem/rails_admin
- gemJul 6, 2023pkg:gem/sanitize
- gemDec 30, 2025pkg:gem/uri
- gemMay 8, 2026pkg:gem/view_component
- gemMay 8, 2026pkg:gem/yard
- gemOct 16, 2024pkg:gem/actiontext
- gemJun 3, 2024pkg:gem/activeadmin
- gemAug 5, 2020pkg:gem/chartkick
- gemSep 16, 2024pkg:gem/decidim-admin
- gemSep 17, 2024pkg:gem/devise-two-factor
- gemNov 2, 2022pkg:gem/fluentd
- gemNov 13, 2017pkg:gem/geminabox
- gemJan 17, 2023pkg:gem/git
- gemJul 15, 2022pkg:gem/gollum
- gemSep 19, 2024pkg:gem/google-protobuf
- gemDec 23, 2025pkg:gem/httparty
- gemDec 25, 2023pkg:gem/json-jwt
- gemAug 18, 2022pkg:gem/omniauth
- gemNov 16, 2018pkg:gem/openssl
- gemApr 30, 2024pkg:gem/phlex
- gemJun 13, 2018pkg:gem/private_address_check
- gemFeb 26, 2024pkg:gem/rack-cors
- gemMay 14, 2024pkg:gem/rdoc
- gemDec 22, 2023pkg:gem/resque
- gemAug 19, 2019pkg:gem/rest-client
- gemSep 25, 2019pkg:gem/rubyzip
- gemJul 25, 2024pkg:gem/spina
- gemFeb 6, 2026pkg:gem/spree_api
- gemOct 16, 2024pkg:gem/actionmailer
- gemApr 7, 2026pkg:gem/addressable
- gemAug 5, 2022pkg:gem/administrate
- gemJan 19, 2026pkg:gem/alchemy_cms
- gemFeb 20, 2020pkg:gem/bson
- gemApr 9, 2026pkg:gem/bsv-sdk
- gemApr 1, 2022pkg:gem/cocoapods-downloader
- gemNov 13, 2024pkg:gem/decidim-meetings
- gemFeb 20, 2024pkg:gem/decidim-templates
- gemFeb 2, 2018pkg:gem/echor
- gemFeb 23, 2015pkg:gem/facter
- gemJul 31, 2020pkg:gem/faye
- gemAug 5, 2020pkg:gem/field_test
- gemNov 3, 2016pkg:gem/git-fastclone
- gemAug 29, 2025pkg:gem/google_sign_in
- gemNov 6, 2018pkg:gem/i18n
- gemApr 22, 2026pkg:gem/iodine
- gemMay 7, 2025pkg:gem/jruby-openssl
- gemMay 27, 2024pkg:gem/kaminari
- gemMar 19, 2021pkg:gem/kramdown
- gemJun 16, 2017pkg:gem/logstash-core
- gemJul 17, 2017pkg:gem/mapbox-rails
- gemJun 9, 2022pkg:gem/mechanize
- gemFeb 6, 2023pkg:gem/metasploit-framework
- gemJul 12, 2019pkg:gem/mini_magick
- gemNov 21, 2019pkg:gem/net-ldap
- gemDec 11, 2019pkg:gem/omniauth-facebook
- gemJun 13, 2025pkg:gem/openc3-cosmos-tool-iframe
Showing top 100 packages in gem by CVE count. Data union of GitHub Security Advisories + OSV.dev (refreshed every 15 min).