{"source":"ghsa-rubygems","note":"Free 5-item preview. The full feed is $0.05/call at GET /v1/ghsa-rubygems/changes.","question":"Which new security vulnerabilities / CVEs affecting RubyGems/Ruby packages were published since T, and how severe (CVSS) are they?","sample":[{"source":"ghsa-rubygems","entityId":"ghsa:GHSA-p5f6-rccc-jv98","type":"advisory","title":"GHSA-p5f6-rccc-jv98 / CVE-2026-50276: dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS","summary":"HIGH severity. Affected: datadog.","significance":8,"detectedAt":"2026-07-16T01:33:49.368Z","effectiveDate":"2026-07-15T23:07:49Z","sourceUrl":"https://github.com/advisories/GHSA-p5f6-rccc-jv98","detail":{"severity":"high","cve":"CVE-2026-50276","packages":"datadog","cvss":7.5}},{"source":"ghsa-rubygems","entityId":"ghsa:GHSA-ghhp-3qvg-889p","type":"advisory","title":"GHSA-ghhp-3qvg-889p / CVE-2026-54463: websocket-driver: Memory exhaustion via abuse of protocol length headers","summary":"MEDIUM severity. Affected: websocket-driver.","significance":5,"detectedAt":"2026-07-15T23:01:03.782Z","effectiveDate":"2026-07-15T22:01:52Z","sourceUrl":"https://github.com/advisories/GHSA-ghhp-3qvg-889p","detail":{"severity":"medium","cve":"CVE-2026-54463","packages":"websocket-driver","cvss":null}},{"source":"ghsa-rubygems","entityId":"ghsa:GHSA-33ph-fccm-39pj","type":"advisory","title":"GHSA-33ph-fccm-39pj / CVE-2026-54464: websocket-driver: Resource limit bypass via message compression","summary":"MEDIUM severity. Affected: websocket-driver.","significance":5,"detectedAt":"2026-07-15T23:01:03.782Z","effectiveDate":"2026-07-15T22:03:59Z","sourceUrl":"https://github.com/advisories/GHSA-33ph-fccm-39pj","detail":{"severity":"medium","cve":"CVE-2026-54464","packages":"websocket-driver","cvss":null}},{"source":"ghsa-rubygems","entityId":"ghsa:GHSA-8j3g-f24p-4mpw","type":"advisory","title":"GHSA-8j3g-f24p-4mpw / CVE-2026-54465: websocket-driver: Memory exhaustion in HTTP header parser","summary":"MEDIUM severity. Affected: websocket-driver.","significance":5,"detectedAt":"2026-07-15T23:01:03.782Z","effectiveDate":"2026-07-15T22:05:39Z","sourceUrl":"https://github.com/advisories/GHSA-8j3g-f24p-4mpw","detail":{"severity":"medium","cve":"CVE-2026-54465","packages":"websocket-driver","cvss":null}},{"source":"ghsa-rubygems","entityId":"ghsa:GHSA-97jw-64cj-jc58","type":"advisory","title":"GHSA-97jw-64cj-jc58 / CVE-2026-54498: ViewComponent: around_render HTML-Safety Bypass","summary":"HIGH severity. Affected: view_component.","significance":9,"detectedAt":"2026-07-15T23:01:03.782Z","effectiveDate":"2026-07-15T22:51:04Z","sourceUrl":"https://github.com/advisories/GHSA-97jw-64cj-jc58","detail":{"severity":"high","cve":"CVE-2026-54498","packages":"view_component","cvss":8.7}}]}