chris

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-11627 CVE-2022-29970 CVE-2022-45442 CVE-2025-61921 Upstream summary: pkgsrc audit-packages flagged ruby{22,23,24,25}-sinatra<2.0.2 for vulnerability class 'cross-site-scripting'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-11627 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-3760 CVE-2014-7819 Upstream summary: pkgsrc audit-packages flagged ruby{22,23,24,25}-sprockets<2.2.3nb3 for vulnerability class 'information-leak'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-3760 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-54314 Upstream summary: pkgsrc audit-packages flagged ruby{31,32,33,34}-thor<1.4.0 for vulnerability class 'command-injection'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-54314 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2022-31163 Upstream summary: pkgsrc audit-packages flagged ruby{26,27,30,31}-tzinfo<1.2.10 for vulnerability class 'path-traversal'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-31163 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-6442 Upstream summary: pkgsrc audit-packages flagged ruby{31,32,33,34}-webrick<1.8.2 for vulnerability class 'request-smuggling'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-6442 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged ruby{193,200}-will-paginate<3.0.5 for vulnerability class 'cross-site-scripting'. Reference: http://secunia.com/advisories/56180/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2022-24795 CVE-2017-16516 Upstream summary: pkgsrc audit-packages flagged ruby{25,26,27,30,31}-yajl<1.4.2 for vulnerability class 'integer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-24795 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-17042 CVE-2019-1020001 Upstream summary: pkgsrc audit-packages flagged ruby{22,23,24,25,26}-yard<0.9.11 for vulnerability class 'directory-traversal'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-17042 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-5946 CVE-2018-1000544 CVE-2019-16892 Upstream summary: pkgsrc audit-packages flagged ruby{18,21,22,23}-zip<1.2.1 for vulnerability class 'directory-traversal'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5946 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2011-0448 CVE-2011-2930 Upstream summary: pkgsrc audit-packages flagged ruby1{8,9}-activerecord>=3.0<3.0.4 for vulnerability class 'sql-injection'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0448 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]