Private Address Check Ruby Gem (Hackerone) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2018-06-13. Vendor: Hackerone.

CVEs of Private Address Check Ruby Gem

• CVE-2018-3759 - CVSS 3.7 (low), 2018-06-13: private_address_check ruby gem before 0.5.0 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition due to the address the socket uses not being…
• CVE-2017-0909 - CVSS 9.8 (critical), 2017-11-16: The private_address_check ruby gem before 0.4.1 is vulnerable to a bypass due to an incomplete blacklist of common private/local network addresses used to…