CVE-2013-1802: The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might a...

Security readout for executives and security teams

CVE-2013-1802 affects the Ruby extlib gem version 0.9.15 and earlier. Improper string cast restrictions may let remote attackers trigger object injection, arbitrary code execution, or denial of service when vulnerable applications process certain Action Pack type conversions. Exposure is most likely in older Ruby applications or packaged distributions that include extlib 0.9.15 or earlier and process untrusted request data through Action Pack-supported YAML or Symbol conversions. Prioritize remediation for internet-facing legacy Ruby applications. The potential impact includes code execution and denial of service, but available evidence does not confirm current exploitation or provide a modern severity score. Mitigation focus: Inventory Ruby applications and packages for extlib 0.9.15 or earlier.; Apply vendor-supported extlib updates referenced by distribution or hosting advisories.; Check SUSE, Red Hat, and upstream guidance for the corrected package version..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.