Filter
-Infinity
0

Debian LinuxA deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that…

First published (updated )

Ruby on RailsInfoleak

First published (updated )

rubygems/activestoragePossible Sensitive Session Information Leak in Active Storage

EPSS
0.04%
First published (updated )

redhat/rubygem-railsInformation Exposure when using Puma with Rails

First published (updated )

DragonflyCode Injection

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Ruby on RailsRuby on Rails Directory Traversal Vulnerability

First published (updated )

Ruby on RailsRuby on Rails Directory Traversal Vulnerability

First published (updated )

Ruby on RailsCSRF, CRLF Injection

First published (updated )

Ruby on RailsCode Injection

7.5
First published (updated )

Ruby on RailsUnspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Ruby on RailsThe (1) jdom.rb and (2) rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2…

First published (updated )

Ruby on RailsSQL Injection

7.5
First published (updated )

Ruby on RailsA specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a sta…

7.5
First published (updated )

Clockwork WebCSRF

First published (updated )

rubygems/actionpackA regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Sp…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Ruby on Rails ActionPackAn open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redire…

First published (updated )

rubygems/actionpackRails possible ReDoS vulnerability in Accept header parsing in Action Dispatch

7.5
EPSS
0.04%
First published (updated )

rubygems/railsRails Possible XSS Vulnerability in Action Controller

EPSS
0.04%
First published (updated )

Ruby on Railsactionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, a…

First published (updated )

Ruby on RailsThe decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ru…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Ruby on RailsSQL Injection

7.5
First published (updated )

Ruby on RailsXSS

First published (updated )

Ruby on RailsXSS

First published (updated )

Ruby on RailsSQL Injection

7.5
First published (updated )

Ruby on Railsactionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, a…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rubygems/actionpackXSS

First published (updated )

Ruby on Rails 7.1Out of support

First published (updated )

Ruby on Rails 7.1Out of support

First published (updated )

Ruby on Rails 7.0Reached end of life

First published (updated )

Ruby on Rails 7.0Reached end of life

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203