Safemode Project

safemode_project

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Safemode

safemode

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-7540 1Safemode Project 1Safemode May 13, 2026 Jul 21, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete per...Show more rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.Show less
CVE-2016-3693 1Safemode Project 1Safemode May 6, 2026 May 20, 2016 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2017-7540

1Safemode Project

1Safemode

May 13, 2026

Jul 21, 2017

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete per...Show more

CVE-2016-3693

1Safemode Project

1Safemode

May 6, 2026

May 20, 2016

N/A· v4

8.1 HIGH· v3

6.8 MEDIUM· v2

The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.