CVE-2015-1828: Http.rb Project Http.rb

Medium severity, CVSS 5.9. EPSS: 1.5% chance of exploitation in the next 30 days.

The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack.

Affected products

• Http.rb Project Http.rb: up to and including 0.7.2

Published 2017-10-06. Last modified 2026-06-17.