gist vulnerabilities

1 known vulnerability in gist from Defunkt. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  gist: Improper Certificate Validation

  CVE-2026-105221Oct 4, 2026Defunkt

  The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because http_connection in lib/gist.rb sets VERIFY_NONE. Attackers can present any certificate to read or modify Gi