IndexedVerified
Ruby Security
Ruby SAST rules aggregated across verified providers.
Fetch pack
greprules pack fetch ruby-security --engine opengrepcurl https://api.greprules.io/api/packs/ruby-security.tar.gz -o ruby-security.tar.gz- Owner
- Provally
- Total rules
- 108
- Downloads
- 0
- Last updated
- 2026-09-02
- Languages
Ruby
Included rules
CVE-2026-82470: Ruby Rotp Totp Verify Without After
cve-2026-82470-ruby-rotp-totp-verify-without-afterCVE-2026-82466: Rodauth Webauthn Account Id Takeovercve-2026-82466-rodauth-webauthn-account-id-takeoverCVE-2026-73648: Incomplete Svg Href Scrubbingcve-2026-73648-incomplete-svg-href-scrubbingCVE-2026-73492: Cgi Unescape Html Uri Validation Bypasscve-2026-73492-cgi-unescape-html-uri-validation-bypassCVE-2026-73491: Ruby Html5 Uri Validation Missing Whitespace Entity Stripcve-2026-73491-ruby-html5-uri-validation-missing-whitespace-entity-stripCVE-2026-73331: Ruby Activerecord Sql Injection Interpolationcve-2026-73331-ruby-activerecord-sql-injection-interpolationCVE-2026-73330: Ruby Eval Collection Elementcve-2026-73330-ruby-eval-collection-elementCVE-2026-72719: Rails Strong Params Account Idcve-2026-72719-rails-strong-params-account-idCVE-2026-67432: Ruby Rack Unbounded Body Readcve-2026-67432-ruby-rack-unbounded-body-readCVE-2026-67431: Missing Session Ownership Validationcve-2026-67431-missing-session-ownership-validationCVE-2026-66748: Ruby Eval Array Callbackscve-2026-66748-ruby-eval-array-callbacksCVE-2026-63118: Mcp Streamable Http Missing Host Origin Validationcve-2026-63118-mcp-streamable-http-missing-host-origin-validationCVE-2026-54603: Ruby Redirect Credential Leakcve-2026-54603-ruby-redirect-credential-leakCVE-2026-54498: Rails Collection Join Html Safecve-2026-54498-rails-collection-join-html-safeCVE-2026-54465: Unbounded Streaming Chunk Parsercve-2026-54465-unbounded-streaming-chunk-parserCVE-2026-54464: Ruby Websocket Driver Missing Size Checkcve-2026-54464-ruby-websocket-driver-missing-size-checkCVE-2026-54463: Ruby Varint Unbounded Accumulationcve-2026-54463-ruby-varint-unbounded-accumulationCVE-2026-54297: Ruby Unbounded Nested Params Decodingcve-2026-54297-ruby-unbounded-nested-params-decodingCVE-2026-54171: Excon Incomplete Header Redactioncve-2026-54171-excon-incomplete-header-redactionCVE-2026-53962: Nokogiri Insecure Xml Sanitizationcve-2026-53962-nokogiri-insecure-xml-sanitizationCVE-2026-53727: Ruby Recursive Fetch File Disclosurecve-2026-53727-ruby-recursive-fetch-file-disclosureCVE-2026-49342: Traverse Request Path Via Joincve-2026-49342-traverse-request-path-via-joinCVE-2026-47777: Activitypub Missing Authorization Matchcve-2026-47777-activitypub-missing-authorization-matchCVE-2026-47737: Ruby Puma Proxy Protocol Spoofingcve-2026-47737-ruby-puma-proxy-protocol-spoofing24 of 108 loaded