Browse / RubyGems
RubyGems
31disclosed reports
$5,000paid in bounties
49known subdomains
Attack surface: 49 known subdomains
49subdomains across 1 root domain
Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.
What gets reported to RubyGems
Most upvoted reports
AllValidInformativeN/ADuplicate
- Host header Injection rubygems.orgN/AOpen Redirect · low3 votes
- RCE,SQL,Vulnerability + Exploit Method.N/ACommand Injection - Generic1 votes