Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ruby/rubygems

              master @ 1ebea6e
            

Fixes

CVEs

CRITICAL

Peak severity

37.5%

Coverage

Highlights

Unsafe Deserialization: 3 prior fixes. Scrutinize any change in this area.

lib/rubygems/package/old.rb: most-fixed (2 issues). Treat as high-risk during review.

8 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Code Execution: 1 historical fix(es) link lib/rubygems/remote_fetcher.rb to Code Execution.

Unsafe Deserialization: 1 historical fix(es) link lib/rubygems/safe_yaml.rb, lib/rubygems/package.rb, lib/rubygems/package/old.rb, lib/rubygems/config_file.rb, lib/rubygems/specification.rb to Unsafe Deserialization.

Certificate Validation Bypass: 1 historical fix(es) link lib/rubygems/remote_fetcher.rb to Certificate Validation Bypass.