rdoc
RDoc produces HTML and online documentation for Ruby projects.
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 127
- Cadence
- ~27 days
- Last 12 months
- 12
Reach
- Stars
- 928
Details
- License
- unknown
- First release
- Apr 10, 2008
| Version | Released | |
|---|---|---|
8.1.0
minor
| ||
8.0.0
major
| ||
7.0.4
patch
| ||
7.2.0
minor
| ||
7.1.0
minor
| ||
7.0.3
patch
| ||
7.0.2
patch
| ||
7.0.1
patch
| ||
7.0.0
major
| ||
6.17.0
minor
| ||
6.16.1
patch
| ||
6.16.0
minor
| ||
6.15.1
patch
| ||
6.15.0
minor
| ||
6.14.2
patch
| ||
6.14.1
patch
| ||
6.14.0
minor
| ||
6.13.1
patch
| ||
6.13.0
minor
| ||
6.12.0
minor
| ||
6.11.0
minor
| ||
6.10.0
minor
| ||
6.9.1
patch
| ||
6.9.0
minor
| ||
6.8.0
minor
| ||
6.8.1
patch
| ||
6.7.0
minor
| ||
6.6.3.1
patch
| ||
6.4.1.1
patch
| ||
6.5.1.1
patch
| ||
6.3.4.1
patch
| ||
6.6.2
patch
1 CVE
CVE-2024-27281
GHSA-592j-995h-p23j
Mar 25, 2024
RDoc RCE vulnerability with .rdoc_options
Low
Network
Low
None
An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When parsing When loading the documentation cache, object injection and resultant remote code execution are also possible if there were a crafted cache. We recommend to update the RDoc gem to version 6.6.3.1 or later. In order to ensure compatibility with bundled version in older Ruby series, you may update as follows instead:
You can use Note: 6.3.4, 6.4.1, 6.5.1 and 6.6.3 have a incorrect fix. We recommend to upgrade 6.3.4.1, 6.4.1.1, 6.5.1.1 and 6.6.3.1 instead of them. Affected versions
6.3.3
6.4.0
6.5.0
6.6.0
6.6.1
6.6.2
Fixed in
6.3.4.1
6.4.1.1
6.5.1.1
6.6.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
6.6.1
patch
1 CVE
CVE-2024-27281
GHSA-592j-995h-p23j
Mar 25, 2024
RDoc RCE vulnerability with .rdoc_options
Low
Network
Low
None
An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When parsing When loading the documentation cache, object injection and resultant remote code execution are also possible if there were a crafted cache. We recommend to update the RDoc gem to version 6.6.3.1 or later. In order to ensure compatibility with bundled version in older Ruby series, you may update as follows instead:
You can use Note: 6.3.4, 6.4.1, 6.5.1 and 6.6.3 have a incorrect fix. We recommend to upgrade 6.3.4.1, 6.4.1.1, 6.5.1.1 and 6.6.3.1 instead of them. Affected versions
6.3.3
6.4.0
6.5.0
6.6.0
6.6.1
6.6.2
Fixed in
6.3.4.1
6.4.1.1
6.5.1.1
6.6.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
6.6.0
minor
1 CVE
CVE-2024-27281
GHSA-592j-995h-p23j
Mar 25, 2024
RDoc RCE vulnerability with .rdoc_options
Low
Network
Low
None
An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When parsing When loading the documentation cache, object injection and resultant remote code execution are also possible if there were a crafted cache. We recommend to update the RDoc gem to version 6.6.3.1 or later. In order to ensure compatibility with bundled version in older Ruby series, you may update as follows instead:
You can use Note: 6.3.4, 6.4.1, 6.5.1 and 6.6.3 have a incorrect fix. We recommend to upgrade 6.3.4.1, 6.4.1.1, 6.5.1.1 and 6.6.3.1 instead of them. Affected versions
6.3.3
6.4.0
6.5.0
6.6.0
6.6.1
6.6.2
Fixed in
6.3.4.1
6.4.1.1
6.5.1.1
6.6.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
6.5.0
minor
1 CVE
CVE-2024-27281
GHSA-592j-995h-p23j
Mar 25, 2024
RDoc RCE vulnerability with .rdoc_options
Low
Network
Low
None
An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When parsing When loading the documentation cache, object injection and resultant remote code execution are also possible if there were a crafted cache. We recommend to update the RDoc gem to version 6.6.3.1 or later. In order to ensure compatibility with bundled version in older Ruby series, you may update as follows instead:
You can use Note: 6.3.4, 6.4.1, 6.5.1 and 6.6.3 have a incorrect fix. We recommend to upgrade 6.3.4.1, 6.4.1.1, 6.5.1.1 and 6.6.3.1 instead of them. Affected versions
6.3.3
6.4.0
6.5.0
6.6.0
6.6.1
6.6.2
Fixed in
6.3.4.1
6.4.1.1
6.5.1.1
6.6.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
6.4.0
minor
1 CVE
CVE-2024-27281
GHSA-592j-995h-p23j
Mar 25, 2024
RDoc RCE vulnerability with .rdoc_options
Low
Network
Low
None
An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When parsing When loading the documentation cache, object injection and resultant remote code execution are also possible if there were a crafted cache. We recommend to update the RDoc gem to version 6.6.3.1 or later. In order to ensure compatibility with bundled version in older Ruby series, you may update as follows instead:
You can use Note: 6.3.4, 6.4.1, 6.5.1 and 6.6.3 have a incorrect fix. We recommend to upgrade 6.3.4.1, 6.4.1.1, 6.5.1.1 and 6.6.3.1 instead of them. Affected versions
6.3.3
6.4.0
6.5.0
6.6.0
6.6.1
6.6.2
Fixed in
6.3.4.1
6.4.1.1
6.5.1.1
6.6.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
6.3.3
patch
1 CVE
CVE-2024-27281
GHSA-592j-995h-p23j
Mar 25, 2024
RDoc RCE vulnerability with .rdoc_options
Low
Network
Low
None
An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When parsing When loading the documentation cache, object injection and resultant remote code execution are also possible if there were a crafted cache. We recommend to update the RDoc gem to version 6.6.3.1 or later. In order to ensure compatibility with bundled version in older Ruby series, you may update as follows instead:
You can use Note: 6.3.4, 6.4.1, 6.5.1 and 6.6.3 have a incorrect fix. We recommend to upgrade 6.3.4.1, 6.4.1.1, 6.5.1.1 and 6.6.3.1 instead of them. Affected versions
6.3.3
6.4.0
6.5.0
6.6.0
6.6.1
6.6.2
Fixed in
6.3.4.1
6.4.1.1
6.5.1.1
6.6.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
6.1.2.1
patch
| ||
6.3.2
patch
| ||
6.3.1
patch
| ||
6.3.0
minor
1 CVE
CVE-2021-31799
GHSA-ggxm-pgc9-g7fp
Sep 01, 2021
Arbitrary Code Execution in Rdoc
7.0
/ 10
High
Local
High
Low
None
Unchanged
High
High
High
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. Affected versions
3.11
3.12
3.12.1
3.12.2
4.0.0
4.0.0.preview2
4.0.0.preview2.1
4.0.0.rc.2
4.0.0.rc.2.1
4.0.1
4.1.0
4.1.0.preview.3
+ 30 more Show less
4.1.1
4.1.2
4.2.0
4.2.1
4.2.2
4.3.0
5.0.0
5.0.0.beta1
5.0.0.beta2
5.0.1
5.1.0
6.0.0
6.0.0.beta1
6.0.0.beta2
6.0.0.beta3
6.0.0.beta4
6.0.1
6.0.1.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0.beta1
6.1.0.beta2
6.1.0.beta3
6.1.1
6.1.2
6.2.0
6.2.1
6.3.0
Fixed in
6.1.2.1
6.2.1.1
6.3.1
References
Updated Nov 14, 2024 · Source: OSV.dev | ||
6.2.1
patch
1 CVE
CVE-2021-31799
GHSA-ggxm-pgc9-g7fp
Sep 01, 2021
Arbitrary Code Execution in Rdoc
7.0
/ 10
High
Local
High
Low
None
Unchanged
High
High
High
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. Affected versions
3.11
3.12
3.12.1
3.12.2
4.0.0
4.0.0.preview2
4.0.0.preview2.1
4.0.0.rc.2
4.0.0.rc.2.1
4.0.1
4.1.0
4.1.0.preview.3
+ 30 more Show less
4.1.1
4.1.2
4.2.0
4.2.1
4.2.2
4.3.0
5.0.0
5.0.0.beta1
5.0.0.beta2
5.0.1
5.1.0
6.0.0
6.0.0.beta1
6.0.0.beta2
6.0.0.beta3
6.0.0.beta4
6.0.1
6.0.1.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0.beta1
6.1.0.beta2
6.1.0.beta3
6.1.1
6.1.2
6.2.0
6.2.1
6.3.0
Fixed in
6.1.2.1
6.2.1.1
6.3.1
References
Updated Nov 14, 2024 · Source: OSV.dev | ||
6.2.0
minor
1 CVE
CVE-2021-31799
GHSA-ggxm-pgc9-g7fp
Sep 01, 2021
Arbitrary Code Execution in Rdoc
7.0
/ 10
High
Local
High
Low
None
Unchanged
High
High
High
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. Affected versions
3.11
3.12
3.12.1
3.12.2
4.0.0
4.0.0.preview2
4.0.0.preview2.1
4.0.0.rc.2
4.0.0.rc.2.1
4.0.1
4.1.0
4.1.0.preview.3
+ 30 more Show less
4.1.1
4.1.2
4.2.0
4.2.1
4.2.2
4.3.0
5.0.0
5.0.0.beta1
5.0.0.beta2
5.0.1
5.1.0
6.0.0
6.0.0.beta1
6.0.0.beta2
6.0.0.beta3
6.0.0.beta4
6.0.1
6.0.1.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0.beta1
6.1.0.beta2
6.1.0.beta3
6.1.1
6.1.2
6.2.0
6.2.1
6.3.0
Fixed in
6.1.2.1
6.2.1.1
6.3.1
References
Updated Nov 14, 2024 · Source: OSV.dev | ||
6.1.2
patch
1 CVE
CVE-2021-31799
GHSA-ggxm-pgc9-g7fp
Sep 01, 2021
Arbitrary Code Execution in Rdoc
7.0
/ 10
High
Local
High
Low
None
Unchanged
High
High
High
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. Affected versions
3.11
3.12
3.12.1
3.12.2
4.0.0
4.0.0.preview2
4.0.0.preview2.1
4.0.0.rc.2
4.0.0.rc.2.1
4.0.1
4.1.0
4.1.0.preview.3
+ 30 more Show less
4.1.1
4.1.2
4.2.0
4.2.1
4.2.2
4.3.0
5.0.0
5.0.0.beta1
5.0.0.beta2
5.0.1
5.1.0
6.0.0
6.0.0.beta1
6.0.0.beta2
6.0.0.beta3
6.0.0.beta4
6.0.1
6.0.1.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0.beta1
6.1.0.beta2
6.1.0.beta3
6.1.1
6.1.2
6.2.0
6.2.1
6.3.0
Fixed in
6.1.2.1
6.2.1.1
6.3.1
References
Updated Nov 14, 2024 · Source: OSV.dev | ||
5.0.1
patch
1 CVE
CVE-2021-31799
GHSA-ggxm-pgc9-g7fp
Sep 01, 2021
Arbitrary Code Execution in Rdoc
7.0
/ 10
High
Local
High
Low
None
Unchanged
High
High
High
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. Affected versions
3.11
3.12
3.12.1
3.12.2
4.0.0
4.0.0.preview2
4.0.0.preview2.1
4.0.0.rc.2
4.0.0.rc.2.1
4.0.1
4.1.0
4.1.0.preview.3
+ 30 more Show less
4.1.1
4.1.2
4.2.0
4.2.1
4.2.2
4.3.0
5.0.0
5.0.0.beta1
5.0.0.beta2
5.0.1
5.1.0
6.0.0
6.0.0.beta1
6.0.0.beta2
6.0.0.beta3
6.0.0.beta4
6.0.1
6.0.1.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0.beta1
6.1.0.beta2
6.1.0.beta3
6.1.1
6.1.2
6.2.0
6.2.1
6.3.0
Fixed in
6.1.2.1
6.2.1.1
6.3.1
References
Updated Nov 14, 2024 · Source: OSV.dev | ||
6.1.1
patch
1 CVE
CVE-2021-31799
GHSA-ggxm-pgc9-g7fp
Sep 01, 2021
Arbitrary Code Execution in Rdoc
7.0
/ 10
High
Local
High
Low
None
Unchanged
High
High
High
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. Affected versions
3.11
3.12
3.12.1
3.12.2
4.0.0
4.0.0.preview2
4.0.0.preview2.1
4.0.0.rc.2
4.0.0.rc.2.1
4.0.1
4.1.0
4.1.0.preview.3
+ 30 more Show less
4.1.1
4.1.2
4.2.0
4.2.1
4.2.2
4.3.0
5.0.0
5.0.0.beta1
5.0.0.beta2
5.0.1
5.1.0
6.0.0
6.0.0.beta1
6.0.0.beta2
6.0.0.beta3
6.0.0.beta4
6.0.1
6.0.1.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0.beta1
6.1.0.beta2
6.1.0.beta3
6.1.1
6.1.2
6.2.0
6.2.1
6.3.0
Fixed in
6.1.2.1
6.2.1.1
6.3.1
References
Updated Nov 14, 2024 · Source: OSV.dev | ||
6.1.0
minor
1 CVE
CVE-2021-31799
GHSA-ggxm-pgc9-g7fp
Sep 01, 2021
Arbitrary Code Execution in Rdoc
7.0
/ 10
High
Local
High
Low
None
Unchanged
High
High
High
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. Affected versions
3.11
3.12
3.12.1
3.12.2
4.0.0
4.0.0.preview2
4.0.0.preview2.1
4.0.0.rc.2
4.0.0.rc.2.1
4.0.1
4.1.0
4.1.0.preview.3
+ 30 more Show less
4.1.1
4.1.2
4.2.0
4.2.1
4.2.2
4.3.0
5.0.0
5.0.0.beta1
5.0.0.beta2
5.0.1
5.1.0
6.0.0
6.0.0.beta1
6.0.0.beta2
6.0.0.beta3
6.0.0.beta4
6.0.1
6.0.1.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0.beta1
6.1.0.beta2
6.1.0.beta3
6.1.1
6.1.2
6.2.0
6.2.1
6.3.0
Fixed in
6.1.2.1
6.2.1.1
6.3.1
References
Updated Nov 14, 2024 · Source: OSV.dev | ||
6.1.0.beta3
pre
1 CVE
CVE-2021-31799
GHSA-ggxm-pgc9-g7fp
Sep 01, 2021
Arbitrary Code Execution in Rdoc
7.0
/ 10
High
Local
High
Low
None
Unchanged
High
High
High
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. Affected versions
3.11
3.12
3.12.1
3.12.2
4.0.0
4.0.0.preview2
4.0.0.preview2.1
4.0.0.rc.2
4.0.0.rc.2.1
4.0.1
4.1.0
4.1.0.preview.3
+ 30 more Show less
4.1.1
4.1.2
4.2.0
4.2.1
4.2.2
4.3.0
5.0.0
5.0.0.beta1
5.0.0.beta2
5.0.1
5.1.0
6.0.0
6.0.0.beta1
6.0.0.beta2
6.0.0.beta3
6.0.0.beta4
6.0.1
6.0.1.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0.beta1
6.1.0.beta2
6.1.0.beta3
6.1.1
6.1.2
6.2.0
6.2.1
6.3.0
Fixed in
6.1.2.1
6.2.1.1
6.3.1
References
Updated Nov 14, 2024 · Source: OSV.dev | ||
6.1.0.beta2
pre
1 CVE
CVE-2021-31799
GHSA-ggxm-pgc9-g7fp
Sep 01, 2021
Arbitrary Code Execution in Rdoc
7.0
/ 10
High
Local
High
Low
None
Unchanged
High
High
High
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. Affected versions
3.11
3.12
3.12.1
3.12.2
4.0.0
4.0.0.preview2
4.0.0.preview2.1
4.0.0.rc.2
4.0.0.rc.2.1
4.0.1
4.1.0
4.1.0.preview.3
+ 30 more Show less
4.1.1
4.1.2
4.2.0
4.2.1
4.2.2
4.3.0
5.0.0
5.0.0.beta1
5.0.0.beta2
5.0.1
5.1.0
6.0.0
6.0.0.beta1
6.0.0.beta2
6.0.0.beta3
6.0.0.beta4
6.0.1
6.0.1.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0.beta1
6.1.0.beta2
6.1.0.beta3
6.1.1
6.1.2
6.2.0
6.2.1
6.3.0
Fixed in
6.1.2.1
6.2.1.1
6.3.1
References
Updated Nov 14, 2024 · Source: OSV.dev | ||
6.1.0.beta1
pre
1 CVE
CVE-2021-31799
GHSA-ggxm-pgc9-g7fp
Sep 01, 2021
Arbitrary Code Execution in Rdoc
7.0
/ 10
High
Local
High
Low
None
Unchanged
High
High
High
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. Affected versions
3.11
3.12
3.12.1
3.12.2
4.0.0
4.0.0.preview2
4.0.0.preview2.1
4.0.0.rc.2
4.0.0.rc.2.1
4.0.1
4.1.0
4.1.0.preview.3
+ 30 more Show less
4.1.1
4.1.2
4.2.0
4.2.1
4.2.2
4.3.0
5.0.0
5.0.0.beta1
5.0.0.beta2
5.0.1
5.1.0
6.0.0
6.0.0.beta1
6.0.0.beta2
6.0.0.beta3
6.0.0.beta4
6.0.1
6.0.1.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0.beta1
6.1.0.beta2
6.1.0.beta3
6.1.1
6.1.2
6.2.0
6.2.1
6.3.0
Fixed in
6.1.2.1
6.2.1.1
6.3.1
References
Updated Nov 14, 2024 · Source: OSV.dev |