pkg:RubyGems/passenger

All known vulnerabilities

• CRITICAL9.8CVE-2018-12026Phusion Passenger SpawningKit Contains Arbitrary Read/Write Vulnerability
  >= 5.3.0, < 5.3.2
• HIGH8.8CVE-2018-12027Insecure Permissions in Phusion Passenger
  >= 5.3.0, < 5.3.2
• HIGH7.8CVE-2018-12028Incorrect Access Control in Phusion Passenger
  >= 5.3.0, < 5.3.2
• HIGH7.8CVE-2016-10345Phusion Passenger uses a known /tmp filename
  from 0, < 5.1.0
• HIGH7.5CVE-2012-6135RubyGems passenger gem allows remote attackers to delete files
  from 0, < 4.0.0.rc4
• HIGH7.0CVE-2018-12029Phusion Passenger Race Condition Allows Privilege Escalation
  >= 3.0.0, < 5.3.2
• MEDIUM5.3CVE-2025-26803Phusion Passenger denial of service
  >= 6.0.21, < 6.0.26
• MEDIUM5.3CVE-2018-12615Phusion Passenger incorrect permission assignment
  from 0, < 5.3.2
• MEDIUM4.7CVE-2017-16355passenger - security update
  from 0, < 5.1.11
• LOW3.7CVE-2015-7519passenger - security update
  from 0, < 4.0.60
• —CVE-2014-1832Insecure use of temporary files in Phusion passenger
  >= 4.0.37, < 4.0.38
• —CVE-2014-1831Insecure use of temporary files in passenger
  from 0, < 4.0.38
• —CVE-2013-2119Phusion Passenger Denial of Service
  from 0, < 3.0.21
• —CVE-2013-4136insecure temporary directory usage in passenger
  from 0, < 4.0.6