A package (also known as a library) contains a set of functionality that can be invoked by a Ruby program, such as reading and parsing an XML file. We call these packages 'gems' and RubyGems is a tool to install, create, manage and load these packages in your Ruby environment. RubyGems is also a client for RubyGems.org, a public repository of Gems that allows you to publish a Gem that can be shared and used by other developers. See our guide on publishing a Gem at guides.rubygems.org
rubygems-update has critical vulnerabilities — do not use
Update to >= 9.1.16.0 to fix known vulnerabilities
| Severity | ID | Summary | Fixed in |
|---|---|---|---|
| high | CVE-2018-1000075 | RubyGems Infinite Loop vulnerability | 9.1.16.0 |
| medium | CVE-2018-1000078 | RubyGems Cross-site Scripting vulnerability | 9.1.16.0 |
| medium | CVE-2018-1000079 | RubyGems Path Traversal vulnerability | 9.1.16.0 |
| medium | CVE-2018-1000077 | RubyGems Improper Input Validation vulnerability | 9.1.16.0 |
| high | CVE-2018-1000073 | RubyGems Link Following vulnerability | 9.1.16.0 |
| critical | CVE-2018-1000076 | RubyGems Improper Verification of Cryptographic Signature vulnerability | 9.1.16.0 |
| high | CVE-2018-1000074 | RubyGems Deserialization of Untrusted Data vulnerability | 9.1.16.0 |
Get this data programmatically — free, no authentication.
curl https://depscope.dev/api/check/rubygems/rubygems-updateLast updated · 2026-04-30T04:17:46.651Z