Webrick (Ruby-lang) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 19 known versions, newest CVE from 2025-06-25. Vendor: Ruby-lang.

CVEs of Webrick

• CVE-2025-6442 - CVSS 6.5 (medium), 2025-06-25: Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected…
• CVE-2020-25613 - CVSS 7.5 (high), 2020-10-06: An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked…
• CVE-2019-11879 - CVSS 5.5 (medium), 2019-05-10: The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had local access to create a symlink to a location outside of the web root…
• CVE-2009-4492 - CVSS 7.5 (high), 2010-01-13: WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log…
• CVE-2008-1145 - CVSS 5 (medium), 2008-03-04: Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support…