Hacker GitHub

← All repos

rubysec/ruby-advisory-db

View on GitHub ↗ ★ 1,077 Ruby

A database of vulnerable Ruby Gems

13 mentions on Hacker News by 7 people: 1 story, 12 comments · first 2013-02-14 · latest 2019-04-04

Mentions per year 13 mentions · busiest year 2013 (6)
20082026
AllStoriesComments NewestTopOldest
  1. Note that it won't yet detect this specific vulnerability: https://github.com/rubysec/ruby-advisory-db/pull/386
    comment by thibaut_barrere · 2019-04-04 · in Malicious remote code execution backdoor discovered bootstrap-sass Ruby gem
  2. For extra info, bundler-audit relies on https://github.com/rubysec/ruby-advisory-db
    comment by matthewrudy · 2017-08-27 · in Ask HN: How do you keep track of node packages/ruby gems security issues?
  3. I'd like to know if there is something similar for Python, or something like https://github.com/rubysec/ruby-advisory-db for Python.
    comment by caioariede · 2015-08-07 · in Show HN: Is it vulnerable? Drag-n-drop your Gemfile.lock to check
  4. …I see that phillmv is a contributor to ruby-advisory-db. https://github.com/rubysec/bundler-audit https://github.com/rubysec/ruby-advisory-db
    comment by sciurus · 2015-08-07 · in Show HN: Is it vulnerable? Drag-n-drop your Gemfile.lock to check
  5. …just Ruby, but others as well pretty soon. I'm one of the maintainers of the Ruby Advisory Database https://github.com/rubysec/ruby-advisory-db/ - and we know all about the effort involved.
    comment by phillmv · 2015-07-23 · in Show HN: AppCanary – Keep vulnerable software off your servers
  6. Hey! I'm one of the maintainers behind the Ruby advisory database: https://github.com/rubysec/ruby-advisory-db We're trying to build a common database for people building these tools; at the moment, trawling through CVE disclosures and…
    comment by phillmv · 2014-04-24 · in Ruby Security Have You Not
  7. …list, the ecosystem for disseminating this information is broken. That's why we've started the https://github.com/rubysec/ruby-advisory-db , at least for the Ruby ecosystem.
    comment by phillmv · 2014-04-24 · in Ruby Security Have You Not
  8. Hi, I'm with http://rubysec.github.com/ We maintain a freely available advisory database https://github.com/rubysec/ruby-advisory-db/ designed to be easily machine readable. We also maintain a free ruby-wide security announcement mailing…
    comment by phillmv · 2013-03-18 · in Rails Vulnerability Compilation
  9. …that gemcanary and bundler-audit both use. It's free and open for anyone to use. Check it out: https://github.com/rubysec/ruby-advisory-db
    comment by ontoillogical · 2013-02-28 · in Don't find out about Ruby vulnerabilities through Hacker News and Twitter
  10. …security vulnerabilities that affect the Ruby community is important. To that end, we help maintain https://github.com/rubysec/ruby-advisory-db/ which is free for anyone to use or contribute to.
    comment by ontoillogical · 2013-02-28 · in Don't find out about Ruby vulnerabilities through Hacker News and Twitter
  11. …vulnerable dependencies. We solved this problem for Ruby by… co-maintaining an open source database https://github.com/rubysec/ruby-advisory-db/ – which everyone is free to use. We don't have the resources to do this for every community :).
    comment by phillmv · 2013-02-28 · in Don't find out about Ruby vulnerabilities through Hacker News and Twitter
  12. Also see related projects: - https://github.com/rubysec/ruby-advisory-db - https://github.com/postmodern/bundler-audit
    comment by thibaut_barrere · 2013-02-14 · in Tell HN: Join rubysec-announce for ruby security vulnerabilities notifications