r
rails
Security Risk Profile
33
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 7, 2014 to present
8
Total CVEs
3
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
33/100
low
🆕 4Fresh (<7d)📈 4 in Last 30 Days
Severity Distribution
Critical
0High
3Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
3
2
XSS
2
Most Affected Products
1. rubyonrails Rails96
2. rubygems/actionview6
3. redhat/rubygem-actionview5
4. Rails Ruby on Rails3
5. rubygems/actionpack3
Recent Vulnerabilities
See more →CVE-2026-126069
CVSS 4.7medium
Nov 10, 2026🔧 No Patch
CVE-2026-126084
CVSS 4.7medium
Active Storage: Unsigned Content-Type in Active Storage GCS direct uploads with cache_control
Nov 10, 2026🔧 No Patch
CVE-2026-126070
CVSS 6.1medium
Action View: Possible XSS vulnerability in Action View strip_tags
Nov 10, 2026🔧 No Patch
darkreading-20261104214818
unknown
Critical Rails Bug Threatens to Derail Vulnerable Servers
Nov 4, 2026🔧 No Patch
CVE-2019-5418
CVSS 7.5high
Rails Ruby on Rails Path Traversal Vulnerability
Mar 13, 2019
https://seclists.org/oss-sec/2019/q1/177
unknown
Mar 13, 2019🔧 No Patch
CVE-2016-0752
CVSS 7.5high
Ruby on Rails Directory Traversal Vulnerability
Feb 16, 2016
CVE-2014-0130
CVSS 7.5high
Ruby on Rails Directory Traversal Vulnerability
May 7, 2014🔧 No Patch
Monitor rails in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.