Ruby on Rails
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 45 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 4, 2009 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Active Storage: Possible local file disclosure in Active Storage video previews and analysis
Active Storage: Possible arbitrary file write and read in Active Storage image analysis
Action Pack: Possible Strong Parameters bypass in Parameters#each_key
Action View: Possible XSS vulnerability in Action View text helpers
Action View: Possible XSS vulnerability in Action View highlight helper
Action Pack: Possible sensitive session information leak in Active Storage proxy mode
Action Pack: Possible DoS vulnerability in Action Controller Live streaming
Forwarded Without Question: How Web Frameworks Overtrust the Forwarded Header
Rails patches critical Active Storage flaw with RCE potential
KindaRails2Shell: arbitrary file read to RCE in Rails Active Storage via libvips (CVE-2026-66066)
Monitor Ruby on Rails in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.