Browse / RubyGems

RubyGems

31disclosed reports

$5,000paid in bounties

49known subdomains

See its reports on the map

Attack surface: 49 known subdomains

49subdomains across 1 root domain

All subdomainsLoading…

Download all 49

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to RubyGems

Most upvoted reports

All Valid Informative N/A Duplicate

Dependency repository hijacking aka Repo Jacking from GitHub repo rubygems/bundler-site & rubygems/bundler.github.io + bundler.io docsInformativeOpen Redirect · medium
12 votes
Request Hijacking Vulnerability in RubyGems 2.6.13 and earlierInformativeCommand Injection - Generic · low
5 votes
Cross-Domain JavaScript Source File Inclusion InformativeCross-site Scripting (XSS) - Generic · low
3 votes