pghero (RubyGems) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the RubyGems package pghero, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2020-16253 — CVSS 8.1 (high): The PgHero gem through 2.6.0 for Ruby allows CSRF.
• CVE-2023-22626 — CVSS 7.5 (high): PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. (Depending on…