Today we’re disclosing several vulnerablities to RubyGems. They have all been reported via hackerone.