Rubygems
889 CVEs across 138 months on the top 200 list since Aug 2006. Peak rank #9 in 2 months, last Apr 2013. 3 of them are now in CISA KEV.
Rubygems CVEs per month since Aug 2006
Dec 2021: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #110 · mostly Bundler, Devise_masquerade, Message_busJan 2022: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #114 · mostly Actionpack, Cgi, DateFeb 2022: 5 CVEs · 1 critical · 0 now in CISA KEV · rank #114 · mostly Puma, Actionpack, CgiMar 2022: 7 CVEs · 3 critical · 0 now in CISA KEV · rank #93 · mostly Asciidoctor-include-ext, Foreman_ansible, Image_processingApr 2022: 11 CVEs · 1 critical · 0 now in CISA KEV · rank #67 · mostly Nokogiri, Cocoapods-downloader, Devise-two-factorMay 2022: 15 CVEs · 3 critical · 0 now in CISA KEV · rank #50 · mostly Publify_core, Rubygems.org, NokogiriJun 2022: 13 CVEs · 4 critical · 0 now in CISA KEV · rank #54 · mostly Awesome_spawn, Diffy, DragonflyJul 2022: 3 CVEs · 0 critical · 0 now in CISA KEV · rank #193 · mostly Gollum, Jquery-ui-rails, TzinfoAug 2022: below the top 200 that month, 3 or fewer CVEsSep 2022: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #100 · mostly Pageflow, Arr-pm, CommonmarkerOct 2022: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #109 · mostly Google-protobuf, Actionpack, Fat_free_crmNov 2022: 4 CVEs · 0 critical · 0 now in CISA KEV · rank #149 · mostly Cgi, Dalli, FluentdDec 2022: 17 CVEs · 2 critical · 0 now in CISA KEV · rank #46 · mostly Rails-html-sanitizer, Loofah, Resque-schedulerJan 2023: 13 CVEs · 2 critical · 0 now in CISA KEV · rank #55 · mostly Publify_core, Git, SisimaiFeb 2023: 13 CVEs · 1 critical · 1 now in CISA KEV · rank #54 · mostly Actionpack, Rack, ActiverecordMar 2023: no snapshot, the run for this month failedApr 2023: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #116 · mostly Commonmarker, Fluentd-ui, Kitchen-terraformMay 2023: below the top 200 that month, 3 or fewer CVEsJun 2023: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #72 · mostly Grpc, Avo, RedclothJul 2023: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #146 · mostly Decidim, Decidim-core, Decidim-meetingsAug 2023: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #174 · mostly Rubygems.org, Protocol-http1, CommonmarkerSep 2023: below the top 200 that month, 3 or fewer CVEsOct 2023: 5 CVEs · 1 critical · 0 now in CISA KEV · rank #166 · mostly Bolt, Decidim, Decidim-templatesNov 2023: below the top 200 that month, 4 or fewer CVEsDec 2023: 12 CVEs · 2 critical · 0 now in CISA KEV · rank #63 · mostly Activeadmin, Resque, Jruby-opensslJan 2024: 19 CVEs · 1 critical · 0 now in CISA KEV · rank #50 · mostly Encoded_id-rails, Audited, AvoFeb 2024: 14 CVEs · 1 critical · 0 now in CISA KEV · rank #52 · mostly Rack, Decidim, ActionpackMar 2024: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #115 · mostly Carrierwave, Nokogiri, PhlexApr 2024: below the top 200 that month, 4 or fewer CVEsMay 2024: 9 CVEs · 1 critical · 0 now in CISA KEV · rank #138 · mostly Nokogiri, Kaminari, Rack-contribJun 2024: below the top 200 that month, 4 or fewer CVEsJul 2024: 9 CVEs · 0 critical · 0 now in CISA KEV · rank #84 · mostly Bootstrap, Decidim, Decidim-adminAug 2024: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #118 · mostly Rexml, Fugit, Request_storeSep 2024: 16 CVEs · 2 critical · 0 now in CISA KEV · rank #45 · mostly Camaleon_cms, Decidim, Decidim-adminOct 2024: 12 CVEs · 0 critical · 0 now in CISA KEV · rank #59 · mostly Openc3, Actionpack, DecidimNov 2024: below the top 200 that month, 4 or fewer CVEsDec 2024: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #93 · mostly Rails-html-sanitizer, Pwpush, ActionpackJan 2025: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #137 · mostly Activesupport, Kredis, ActionpackFeb 2025: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #146 · mostly Nokogiri, Passenger, Net-imapMar 2025: 16 CVEs · 4 critical · 0 now in CISA KEV · rank #59 · mostly Ruby-saml, Cgi, RackApr 2025: below the top 200 that month, 4 or fewer CVEsMay 2025: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #158 · mostly Rack, Ejson2env, Jruby-opensslJun 2025: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #143 · mostly Nokogiri, Openc3-cosmos-tool-iframe, RackJul 2025: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #139 · mostly Job-iteration, Measured, NokogiriAug 2025: 6 CVEs · 3 critical · 0 now in CISA KEV · rank #142 · mostly Spree, Google_sign_in, ActiverecordSep 2025: below the top 200 that month, 4 or fewer CVEsOct 2025: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #161 · mostly Rack, SinatraNov 2025: below the top 200 that month, 4 or fewer CVEsDec 2025: 7 CVEs · 2 critical · 0 now in CISA KEV · rank #135 · mostly Ruby-saml, Aws-sdk-s3, Action_text-trixJan 2026: 8 CVEs · 1 critical · 0 now in CISA KEV · rank #116 · mostly Activejob, Activerecord-jdbc-adapter, ActivestorageFeb 2026: 12 CVEs · 0 critical · 0 now in CISA KEV · rank #78 · mostly Rack, Decidim-core, FaradayMar 2026: below the top 200 that month, 7 or fewer CVEsApr 2026: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #109 · mostly Openc3, Avo, Decidim-coreMay 2026: below the top 200 that month, 7 or fewer CVEsJun 2026: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #142 · mostly Nokogiri, Spree, Alchemy_cmsJul 2026: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #191 · mostly Loofah, Action_text-trix, Activerecord-tenantedAug 2026: below the top 200 that month, 8 or fewer CVEsSep 2026: below the top 200 that month, 9 or fewer CVEsOct 2026: below the top 200 that month, 11 or fewer CVEsNov 2026: below the top 200 that month, 3 or fewer CVEs
In the lens
The products that kept showing up in Rubygems's monthly top three from Dec 2021 to Nov 2026. Move the lens and the list follows.
Year by year
Each year's months on the top 200 list. Pick a year to read it in the lens.
The record
- Peak rank
- #9 in 2 months, last Apr 2013
- Busiest month
- Jan 2018, 21 CVEs
- Months with a KEV entry
- 3 of 138 on the list
- On the top 200 list
- 138 of 225 monthly snapshots