| CARVIEW |
Select Language
HTTP/2 302
server: nginx
date: Thu, 31 Jul 2025 21:55:49 GMT
content-type: text/plain; charset=utf-8
content-length: 0
x-archive-redirect-reason: found capture at 20100523135018
location: https://web.archive.org/web/20100523135018/https://www.ruby-lang.org/en/security
server-timing: captures_list;dur=0.986880, exclusion.robots;dur=0.031693, exclusion.robots.policy;dur=0.013929, esindex;dur=0.017608, cdx.remote;dur=9.236982, LoadShardBlock;dur=346.643796, PetaboxLoader3.datanode;dur=191.881631, PetaboxLoader3.resolve;dur=40.918991
x-app-server: wwwb-app210
x-ts: 302
x-tr: 428
server-timing: TR;dur=0,Tw;dur=0,Tc;dur=0
set-cookie: SERVER=wwwb-app210; path=/
x-location: All
x-rl: 0
x-na: 0
x-page-cache: MISS
server-timing: MISS
x-nid: DigitalOcean
referrer-policy: no-referrer-when-downgrade
permissions-policy: interest-cohort=()
HTTP/2 200
server: nginx
date: Thu, 31 Jul 2025 21:55:51 GMT
content-type: text/html;charset=utf-8
x-archive-orig-date: Sun, 23 May 2010 13:50:18 GMT
x-archive-orig-server: Apache/2.2.3 (Debian) DAV/2 SVN/1.4.2 mod_ruby/1.2.6 Ruby/1.8.5(2006-08-25)
x-archive-orig-connection: close
x-archive-guessed-content-type: text/html
x-archive-guessed-charset: windows-1258
memento-datetime: Sun, 23 May 2010 13:50:18 GMT
link: ; rel="original", ; rel="timemap"; type="application/link-format", ; rel="timegate", ; rel="prev memento"; datetime="Sat, 17 Apr 2010 06:04:01 GMT", ; rel="memento"; datetime="Sun, 23 May 2010 13:50:18 GMT", ; rel="next memento"; datetime="Wed, 23 Jun 2010 14:33:03 GMT", Security
Security
Here you will find information about security issues of Ruby.
Reporting Security Vulnerabilities
Security vulnerabilities should be reported via an email to security@ruby-lang.org, which is a private mailing list. Reported problems will be published after fixes.
Known issues
Here are recent issues.
- WEBrick has an Escape Sequence Injection vulnerability published at 10 Jan, 2010
- Heap overflow in String published at 7 Dec, 2009
- DoS vulnerability in REXML published at 23 Aug, 2008
- Multiple vulnerabilities in Ruby published at 8 Aug, 2008
- Arbitrary code execution vulnerabilities published at 20 Jun, 2008
- File access vulnerability of WEBrick published at 3 Mar, 2008
- Net::HTTPS Vulnerability published at 4 Oct, 2007
- Another DoS Vulnerability in CGI Library published at 4 Dec, 2006
- DoS Vulnerability in CGI Library published at 3 Nov, 2006
- Ruby vulnerability in the safe level settings published at 2 Oct, 2005
Get Started, it’s easy!
Explore a new world…
Participate in a friendly and growing community.
- Mailing Lists: Talk about Ruby with programmers from all around the world.
- User Groups: Get in contact with Rubyists in your area.
- Weblogs: Read about what’s happening right now in the Ruby community.
- Ruby Core: Help polish the rough edges of the latest Ruby.
- Issue Tracking: Report or help solve issues in Ruby.
Some Top Ruby Projects
Syndicate
Content available in English, French, Japanese, Korean, Polish, Spanish, Portuguese, Simplified Chinese, Traditional Chinese, Bahasa Indonesia, German, Italian, Czech and Bulgarian.
This website is made with Ruby and powered by Radiant CMS. It is proudly maintained by members of the Ruby community. Please contact our webmaster for questions or comments concerning this website.