Where
-Infinity
0

Trending

Last week
Last month
Last year

Ruby on RailsMaybe 0.6.0 Missing Authorization via HostingsController show/update

Risk 40
Severity
7.1
First published (updated )
CVE-2026-63100

Ruby on Rails Rails 6.1Reached end of life

EOL
Oct 1, 2024
Support Ends
Dec 15, 2021
First published (updated )
latest-version-rails-6.1

Ruby on Rails Rails 6.1Reached end of life

EOL
Oct 1, 2024
Support Ends
Dec 15, 2021
First published (updated )
EOL-rails-6.1

rubygems/actiontextActionText ContentAttachment can Contain Unsanitized HTML

Risk 39
Severity
6.1
First published (updated )
CVE-2024-32464

rubygems/actionpackAction Pack is missing security headers on non-HTML responses

Risk 89
Severity
9.8
First published (updated )
CVE-2024-28103
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Actionpack Project Actionpack RubyAn open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redire…

Risk 38
Severity
6.1
First published (updated )
CVE-2023-22797

Clockwork Web Project Clockwork WebCSRF

Risk 37
Severity
6.5
First published (updated )
CVE-2023-25015

rubyonrails RailsA open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a…

Risk 39
Severity
6.1
First published (updated )
CVE-2021-44528

rubygems/actionpackXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2011-1497

rubygems/actionpackXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2020-8264
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

rubyonrails RailsCode Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2020-8163

rubyonrails RailsA denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any…

Risk 38
Severity
6.5
First published (updated )
CVE-2020-8185

rubygems/actionviewCSRF

Risk 38
Severity
6.5
First published (updated )
CVE-2020-8167

rubyonrails RailsMalicious File Upload

Risk 43
Severity
7.5
First published (updated )
CVE-2020-8162

Debian Debian LinuxA deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which c…

Risk 44
Severity
7.5
First published (updated )
CVE-2020-8164
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Debian Debian LinuxA deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that…

Risk 87
Severity
9.8
First published (updated )
CVE-2020-8165

rubyonrails Actionpack Page-caching RubyPath Traversal

Risk 86
Severity
9.8
First published (updated )
CVE-2020-8159

Ruby on Rails Rails 6.0Reached end of life

EOL
Jun 1, 2023
Support Ends
Dec 15, 2021
First published (updated )
latest-version-rails-6.0

Ruby on Rails Rails 6.0Reached end of life

EOL
Jun 1, 2023
Support Ends
Dec 15, 2021
First published (updated )
EOL-rails-6.0

rubyonrails RailsCommand Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2019-5420
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

rubygems/actionviewInput Validation

Risk 47
Severity
7.8
First published (updated )
CVE-2019-5419

rubyonrails RailsInfoleak

Risk 37
Severity
6.5
First published (updated )
CVE-2018-16477

redhat/activejobA Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft us…

Risk 43
Severity
7.5
First published (updated )
CVE-2018-16476

Ruby on Rails Rails 5.2Reached end of life

EOL
Jun 1, 2022
Support Ends
Dec 15, 2021
First published (updated )
latest-version-rails-5.2

Ruby on Rails Rails 5.2Reached end of life

EOL
Jun 1, 2022
Support Ends
Dec 15, 2021
First published (updated )
EOL-rails-5.2
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

rubyonrails ruby on RailsSQL Injection

Risk 75
Severity
8.1
First published (updated )
CVE-2017-17919

rubyonrails RailsSQL Injection

Risk 75
Severity
8.1
First published (updated )
CVE-2017-17917

rubyonrails ruby on RailsSQL Injection

Risk 75
Severity
8.1
First published (updated )
CVE-2017-17920

rubyonrails RailsSQL Injection

Risk 75
Severity
8.1
First published (updated )
CVE-2017-17916

Ruby on Rails Rails 5.1Reached end of life

EOL
Aug 25, 2019
Support Ends
Apr 9, 2018
First published (updated )
EOL-rails-5.1
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203