Known Vulnerabilities for Date by Ruby-lang
Listed below are 1 of the newest known vulnerabilities associated with "Date" by "Ruby-lang".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-104910 json | MISP contains an authorization bypass in the related events listing functionality. When a user requests the list of events co... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-102990 json | basic-ftp is an FTP client for Node.js. Prior to 6.2.1, Client.list() can be forced by a malicious or compromised FTP server ... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-102626 json | An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-b... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-101045 json | Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generate... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-96836 json | Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions. | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-96756 json | orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to escape... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-96281 json | On a multi-user system, a user with an active local login session could downgrade a system-wide Flatpak app to an older versi... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-94418 json | Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs the certificate signature check separately from the parse to kee... | Not Provided | 2026-09-27 | 2026-09-29 |
| CVE-2026-93868 json | Cotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users.passrecover.php, creating a ... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-92599 json | joi (npm package `joi`, hapi.js) versions >=17.2.0 <17.13.7 and >=18.0.0 <18.2.6 are vulnerable to regular expression denial ... | Not Provided | 2026-09-16 | 2026-09-18 |