IndexedVerified
Ruby Security
Ruby SAST rules aggregated across verified providers.
Fetch pack
greprules pack fetch ruby-security --engine opengrepcurl https://api.greprules.io/api/packs/ruby-security.tar.gz -o ruby-security.tar.gz- Owner
- Provally
- Total rules
- 72
- Downloads
- 2
- Last updated
- 2026-06-29
- Languages
Ruby
Included rules
CVE-2026-49342: Traverse Request Path Via Join
cve-2026-49342-traverse-request-path-via-joinCVE-2026-47777: Activitypub Missing Authorization Matchcve-2026-47777-activitypub-missing-authorization-matchCVE-2026-44312: Ruby Insecure Ssl Verify Nonecve-2026-44312-ruby-insecure-ssl-verify-noneCVE-2026-42246: Ruby Net Imap Starttls Unverified Callbackcve-2026-42246-ruby-net-imap-starttls-unverified-callbackCVE-2026-42205: Avo Incomplete Action Lookup Missing Custom Controlscve-2026-42205-avo-incomplete-action-lookup-missing-custom-controlsCVE-2026-41493: Unsanitized Rack Path Assignmentcve-2026-41493-unsanitized-rack-path-assignmentCVE-2026-40869: Decidim Collaborative Texts Incorrect Authz Subjectcve-2026-40869-decidim-collaborative-texts-incorrect-authz-subjectCVE-2026-40069: Case Sensitive Constant Inclusion Bypasscve-2026-40069-case-sensitive-constant-inclusion-bypassCVE-2026-39324: Rack Session Cookie Decoder Fallback Bypasses Encryptorscve-2026-39324-rack-session-cookie-decoder-fallback-bypasses-encryptorsCVE-2026-34830: Ruby Unescaped Regex Interpolation Path Subcve-2026-34830-ruby-unescaped-regex-interpolation-path-subCVE-2026-34829: Ruby Unescaped Prefix Regex Interpolationcve-2026-34829-ruby-unescaped-prefix-regex-interpolationCVE-2026-34827: Ruby Unescaped Regex Interpolationcve-2026-34827-ruby-unescaped-regex-interpolationCVE-2026-34826: Ruby Unescaped Regex Interpolationcve-2026-34826-ruby-unescaped-regex-interpolationCVE-2026-34786: Ruby Unescaped Regex Interpolation In Subcve-2026-34786-ruby-unescaped-regex-interpolation-in-subCVE-2026-34763: Ruby Unescaped Regex Strippingcve-2026-34763-ruby-unescaped-regex-strippingCVE-2026-34230: Ruby Unescaped Regex Interpolation Substitutioncve-2026-34230-ruby-unescaped-regex-interpolation-substitutionCVE-2026-34060: Ruby Gemfile Template Source Option Interpolationcve-2026-34060-ruby-gemfile-template-source-option-interpolationCVE-2026-33946: Mcp Session Stream Overwritecve-2026-33946-mcp-session-stream-overwriteCVE-2026-33185: Groups Controller Rb Cwe 000 Cve 2026 33185cve-2026-33185-groups-controller-rb-cwe-000-cve-2026-33185CVE-2026-33174: Activestorage Unbounded Byte Ranges Doscve-2026-33174-activestorage-unbounded-byte-ranges-dosCVE-2026-33170: Ruby String Subclass State Losscve-2026-33170-ruby-string-subclass-state-lossCVE-2026-33169: Ruby Rails Number To Delimited Redoscve-2026-33169-ruby-rails-number-to-delimited-redosCVE-2026-33168: Actionview Missing Blank Key Checkcve-2026-33168-actionview-missing-blank-key-checkCVE-2026-32273: Discourse Missing Category Description Revisorcve-2026-32273-discourse-missing-category-description-revisor24 of 72 loaded