Skip to content

CVE record · 1 source

CVE-2026-105221

CVSS 7.4

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic…

Vendor: GitHub
Product: github
CVSS: 7.4

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

10

CVE NVD 27d ago

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic…

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because http_connection in lib/gist.rb sets VERIFY_NONE. Attackers can present any…

CVSS 7.4 CVE-2026-105221 GitHub