Approved changes feed: RSS · Atom

cpe:2.3:a:mark_evans:dragonfly_gem:0.9.10:*:*:*:*:*:*:*

part: a version: 0.9.10 update: *

VendorMark Evans (c6a7e55c-c79b-557f-88cf-078d3fd25c79)
ProductDragonfly Gem (b0a5c6ce-d242-5751-8a36-6f9b74e5ecf5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:gem/dragonfly purl2cpe 2026-06-01 10:11:44.381731
pkg:github/markevans/dragonfly purl2cpe 2026-06-01 10:11:44.381733

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1756 vulnerable 2026-06-08 05:03:56.131182 Details available
The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.
Published: 2014-06-09T19:00:00.000Z
Updated: 2024-08-06T15:13:32.457Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.