Spectra Assure

failRisk: Tampering

Scanned:

eyes_universal

Top 10k

Applitools Ruby Universal binaries for SDK

License: unknown

Published:

See on RubyGems

SAFE Assessment

Compliance

Licenses

No license compliance issues

Secrets

12 debugging symbols found

Security

Vulnerabilities

1 severe vulnerabilities exploited

Hardening

4 baseline mitigations missing

Threats

Tampering

2 signature compliance mistakes

Malware

No evidence of malware inclusion

INCIDENTS FOR THIS VERSION:

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.

This website uses cookies to ensure the best website experience. By continuing to use this website you are giving your consent to cookies being used. Detailed information about our use of cookies is here.

List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2026/04/21

All detected vulnerabilities are fixable

Run the update/upgrade command in your package manager to resolve the detected vulnerabilities

CVSS Score

CVE Identifier

Summary

Tags

critical

9.8

CVE-2025-15467

OpenSSL is vulnerable to a stack buffer overflow when parsing CMS AuthEnvelopedData messages with maliciously crafted AEAD parameters.

Exploits Exist

Fix Available

high

7.5

CVE-2025-69420

OpenSSL is vulnerable to a type confusion vulnerability in the TimeStamp Response verification code, potentially leading to a Denial of Service.

Fix Available

high

7.5

CVE-2025-69421

OpenSSL's PKCS12_item_decrypt_d2i_ex function can trigger a NULL pointer dereference when processing a malformed PKCS#12 file, leading to Denial of Service.

Fix Available

high

7.5

CVE-2025-9230

OpenSSL CMS implementation is vulnerable to out-of-bounds read and write when decrypting password-based encrypted messages.

Fix Available

high

7.4

CVE-2025-69419

OpenSSL's PKCS12_get_friendlyname function is vulnerable to a one-byte write before the allocated buffer when parsing maliciously crafted PKCS#12 files.

Fix Available

medium

5.5

CVE-2026-22795

OpenSSL is vulnerable to a Denial of Service due to an invalid or NULL pointer dereference when processing a malformed PKCS#12 file.

Fix Available

medium

5.3

CVE-2026-22796

OpenSSL's PKCS7_digest_from_attributes function is vulnerable to a type confusion vulnerability, potentially causing a Denial of Service when processing malformed PKCS#7 data.

Fix Available

medium

4.7

CVE-2025-68160

OpenSSL's BIO_f_linebuffer filter can cause a heap-based out-of-bounds write when writing large, newline-free data into a BIO chain.

Fix Available

medium

4.3

CVE-2024-9143

OpenSSL's low-level GF(2^m) elliptic curve APIs are vulnerable to out-of-bounds memory reads or writes when used with untrusted explicit values for the field polynomial.

Fix Available

medium

4.1

CVE-2024-13176

OpenSSL's ECDSA signature computation is vulnerable to a timing side-channel attack, potentially allowing an attacker to recover the private key.

Fix Available

eyes_universal

SAFE Assessment

Compliance

Security

Threats

IMPORTANT: This package had 8 malicious incidents in versions published within 2 years prior to the latestLatest version with malware incident detected: 3 months agoVersion: 4.56.0

INCIDENTS FOR THIS VERSION:

Did you know...