Rubygems
889 CVEs across 138 months on the top 200 list since Aug 2006. Peak rank #9 in 2 months, last Apr 2013. 3 of them are now in CISA KEV.
Rubygems CVEs per month since Aug 2006
Aug 2021: not on the top 200 that monthSep 2021: 3 CVEs · 0 critical · 0 now in CISA KEV · rank #170 · mostly Better_errors, Clearance, NokogiriOct 2021: 12 CVEs · 0 critical · 0 now in CISA KEV · rank #49 · mostly Camaleon_cms, Jquery-ui-rails, ActionpackNov 2021: 12 CVEs · 3 critical · 0 now in CISA KEV · rank #48 · mostly Spree_auth_devise, Publify_core, PuppetDec 2021: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #110 · mostly Bundler, Devise_masquerade, Message_busJan 2022: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #114 · mostly Actionpack, Cgi, DateFeb 2022: 5 CVEs · 1 critical · 0 now in CISA KEV · rank #114 · mostly Puma, Actionpack, CgiMar 2022: 7 CVEs · 3 critical · 0 now in CISA KEV · rank #93 · mostly Asciidoctor-include-ext, Foreman_ansible, Image_processingApr 2022: 11 CVEs · 1 critical · 0 now in CISA KEV · rank #67 · mostly Nokogiri, Cocoapods-downloader, Devise-two-factorMay 2022: 15 CVEs · 3 critical · 0 now in CISA KEV · rank #50 · mostly Publify_core, Rubygems.org, NokogiriJun 2022: 13 CVEs · 4 critical · 0 now in CISA KEV · rank #54 · mostly Awesome_spawn, Diffy, DragonflyJul 2022: 3 CVEs · 0 critical · 0 now in CISA KEV · rank #193 · mostly Gollum, Jquery-ui-rails, TzinfoAug 2022: not on the top 200 that monthSep 2022: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #100 · mostly Pageflow, Arr-pm, CommonmarkerOct 2022: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #109 · mostly Google-protobuf, Actionpack, Fat_free_crmNov 2022: 4 CVEs · 0 critical · 0 now in CISA KEV · rank #149 · mostly Cgi, Dalli, FluentdDec 2022: 17 CVEs · 2 critical · 0 now in CISA KEV · rank #46 · mostly Rails-html-sanitizer, Loofah, Resque-schedulerJan 2023: 13 CVEs · 2 critical · 0 now in CISA KEV · rank #55 · mostly Publify_core, Git, SisimaiFeb 2023: 13 CVEs · 1 critical · 1 now in CISA KEV · rank #54 · mostly Actionpack, Rack, ActiverecordMar 2023: not on the top 200 that monthApr 2023: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #116 · mostly Commonmarker, Fluentd-ui, Kitchen-terraformMay 2023: not on the top 200 that monthJun 2023: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #72 · mostly Grpc, Avo, RedclothJul 2023: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #146 · mostly Decidim, Decidim-core, Decidim-meetingsAug 2023: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #174 · mostly Rubygems.org, Protocol-http1, CommonmarkerSep 2023: not on the top 200 that monthOct 2023: 5 CVEs · 1 critical · 0 now in CISA KEV · rank #166 · mostly Bolt, Decidim, Decidim-templatesNov 2023: not on the top 200 that monthDec 2023: 12 CVEs · 2 critical · 0 now in CISA KEV · rank #63 · mostly Activeadmin, Resque, Jruby-opensslJan 2024: 19 CVEs · 1 critical · 0 now in CISA KEV · rank #50 · mostly Encoded_id-rails, Audited, AvoFeb 2024: 14 CVEs · 1 critical · 0 now in CISA KEV · rank #52 · mostly Rack, Decidim, ActionpackMar 2024: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #115 · mostly Carrierwave, Nokogiri, PhlexApr 2024: not on the top 200 that monthMay 2024: 9 CVEs · 1 critical · 0 now in CISA KEV · rank #138 · mostly Nokogiri, Kaminari, Rack-contribJun 2024: not on the top 200 that monthJul 2024: 9 CVEs · 0 critical · 0 now in CISA KEV · rank #84 · mostly Bootstrap, Decidim, Decidim-adminAug 2024: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #118 · mostly Rexml, Fugit, Request_storeSep 2024: 16 CVEs · 2 critical · 0 now in CISA KEV · rank #45 · mostly Camaleon_cms, Decidim, Decidim-adminOct 2024: 12 CVEs · 0 critical · 0 now in CISA KEV · rank #59 · mostly Openc3, Actionpack, DecidimNov 2024: not on the top 200 that monthDec 2024: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #93 · mostly Rails-html-sanitizer, Pwpush, ActionpackJan 2025: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #137 · mostly Activesupport, Kredis, ActionpackFeb 2025: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #146 · mostly Nokogiri, Passenger, Net-imapMar 2025: 16 CVEs · 4 critical · 0 now in CISA KEV · rank #59 · mostly Ruby-saml, Cgi, RackApr 2025: not on the top 200 that monthMay 2025: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #158 · mostly Rack, Ejson2env, Jruby-opensslJun 2025: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #143 · mostly Nokogiri, Openc3-cosmos-tool-iframe, RackJul 2025: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #139 · mostly Job-iteration, Measured, NokogiriAug 2025: 6 CVEs · 3 critical · 0 now in CISA KEV · rank #142 · mostly Spree, Google_sign_in, ActiverecordSep 2025: not on the top 200 that monthOct 2025: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #161 · mostly Rack, SinatraNov 2025: not on the top 200 that monthDec 2025: 7 CVEs · 2 critical · 0 now in CISA KEV · rank #135 · mostly Ruby-saml, Aws-sdk-s3, Action_text-trixJan 2026: 8 CVEs · 1 critical · 0 now in CISA KEV · rank #116 · mostly Activejob, Activerecord-jdbc-adapter, ActivestorageFeb 2026: 12 CVEs · 0 critical · 0 now in CISA KEV · rank #78 · mostly Rack, Decidim-core, FaradayMar 2026: not on the top 200 that monthApr 2026: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #109 · mostly Openc3, Avo, Decidim-coreMay 2026: not on the top 200 that monthJun 2026: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #142 · mostly Nokogiri, Spree, Alchemy_cmsJul 2026: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #191 · mostly Loofah, Action_text-trix, Activerecord-tenanted
In the lens
The products that kept showing up in Rubygems's monthly top three from Aug 2021 to Jul 2026. Move the lens and the list follows.
Year by year
Each year's months on the top 200 list. Pick a year to read it in the lens.
The record
- Peak rank
- #9 in 2 months, last Apr 2013
- Busiest month
- Jan 2018, 21 CVEs
- Months with a KEV entry
- 3 of 138 on the list
- On the top 200 list
- 138 of 240 monthly snapshots