https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-6303.htmlhttps://patchthecve.com/cve/CVE-2006-6303.htmlTue, 16 Jun 2026 22:32:52 +0000MEDIUM 5.0: The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.https://patchthecve.com/cve/CVE-2006-5467.htmlhttps://patchthecve.com/cve/CVE-2006-5467.htmlTue, 16 Jun 2026 22:31:16 +0000MEDIUM 5.0: The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and contaihttps://patchthecve.com/cve/CVE-2006-3694.htmlhttps://patchthecve.com/cve/CVE-2006-3694.htmlTue, 16 Jun 2026 22:27:34 +0000MEDIUM 6.4: Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".https://patchthecve.com/cve/CVE-2005-2337.htmlhttps://patchthecve.com/cve/CVE-2005-2337.htmlTue, 16 Jun 2026 22:14:42 +0000HIGH 7.5: Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when Ruby processes a program through standard input (stdin).https://patchthecve.com/cve/CVE-2005-1992.htmlhttps://patchthecve.com/cve/CVE-2005-1992.htmlTue, 16 Jun 2026 22:14:02 +0000HIGH 7.5: The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands.https://patchthecve.com/cve/CVE-2004-0983.htmlhttps://patchthecve.com/cve/CVE-2004-0983.htmlTue, 16 Jun 2026 22:06:47 +0000MEDIUM 5.0: The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.https://patchthecve.com/cve/CVE-2004-0755.htmlhttps://patchthecve.com/cve/CVE-2004-0755.htmlTue, 16 Jun 2026 22:06:18 +0000LOW 2.1: The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.