Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-0902
6.8
MEDIUMCVSS v2
Severity scale
010
Description
RubyGems version 2.6.12 and earlier is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and install gems from a server that the attacker controls.
GitHub