← Back

Http.rb

http.rb

Vendor: Http.rb Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-1828
1Http.rb Project
1Http.rb
May 13, 2026
Oct 6, 2017
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack.