rubygems-update (rubygems) has 25 known vulnerabilities, the worst rated CRITICAL. Upgrade to 3.0.2 or later to clear all of them. No malicious-package signal is recorded.
CyberXYZ does not call a package safe in absolute terms. It records 25 known vulnerabilities for rubygems-update (rubygems), the worst rated CRITICAL, and no malicious-package signal. Whether it is acceptable depends on the version you run.
Does rubygems-update have known vulnerabilities?
Yes. CyberXYZ records 25 known vulnerabilities for rubygems-update (rubygems), the worst rated CRITICAL. These include GHSA-mc6j-h948-v2p6, GHSA-7gcp-2gmq-w3xh, GHSA-mqwr-4qf2-2hcv, GHSA-wp3j-rvfp-624h, GHSA-qj2w-mw2r-pv39.
Which version of rubygems-update should I use?
3.0.2 or later clears every advisory recorded for rubygems-update (rubygems). Check the release you pick before installing it.
How do I check rubygems-update before installing?
Search rubygems-update in CyberXYZ Check at https://cyberxyz.io/check?q=rubygems-update. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-14 at 14:27 UTC. The most recent advisory here was published 2022-05-17. Updated continuously from NVD, GHSA, OSV and CNA feeds.