Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how ruby on rails compares to other vendors in security performance

View Risk Score →

BleepingComputerRails patches critical Active Storage flaw with RCE potential

Exploited
First published (updated )
News
BleepingComputer

KindaRails2Shell: arbitrary file read to RCE in Rails Active Storage via libvips (CVE-2026-66066)

First published (updated )
Social
reddit

Ruby on Rails Active StoragePath Traversal

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2450546

Ruby on Rails Active StorageCommand Injection

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2435565

Ruby on Rails Rails 8.1End of life details

EOL
Oct 10, 2027
Support Ends
Oct 10, 2026
First published (updated )
EOL-rails-8.1
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Ruby on Rails Rails 7.1Reached end of life

EOL
Oct 1, 2025
Support Ends
Oct 1, 2024
First published (updated )
latest-version-rails-7.1

Ruby on Rails Rails 7.1Reached end of life

EOL
Oct 1, 2025
Support Ends
Oct 1, 2024
First published (updated )
EOL-rails-7.1

Ruby on Rails Rails 7.0Reached end of life

EOL
Apr 1, 2025
Support Ends
Oct 15, 2023
First published (updated )
EOL-rails-7.0

Ruby on Rails Rails 7.0Reached end of life

EOL
Apr 1, 2025
Support Ends
Oct 15, 2023
First published (updated )
latest-version-rails-7.0

Ruby on Rails Rails 8.0Out of support

EOL
Nov 7, 2026
Support Ends
May 7, 2026
First published (updated )
EOL-rails-8.0
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Ruby on Rails Rails 8.0Out of support

EOL
Nov 7, 2026
Support Ends
May 7, 2026
First published (updated )
latest-version-rails-8.0

Ruby on Rails Rails 6.1Reached end of life

EOL
Oct 1, 2024
Support Ends
Dec 15, 2021
First published (updated )
latest-version-rails-6.1

Ruby on Rails Rails 6.1Reached end of life

EOL
Oct 1, 2024
Support Ends
Dec 15, 2021
First published (updated )
EOL-rails-6.1

Ruby on Rails Action DispatchThere is a possible ReDoS vulnerability in the query parameter filtering routines of Action Dispatch…

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2319036

Ruby on Rails Rails 7.2Reached end of life

EOL
Aug 9, 2026
Support Ends
Aug 9, 2025
First published (updated )
latest-version-rails-7.2
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Ruby on Rails Rails 7.2Reached end of life

EOL
Aug 9, 2026
Support Ends
Aug 9, 2025
First published (updated )
EOL-rails-7.2

Ruby on Rails Rails::Html::SanitizerXSS

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2101882

Ruby on Rails activerecord-session_storeThe activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby on…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-1935724

Ruby on Rails Rails 6.0Reached end of life

EOL
Jun 1, 2023
Support Ends
Dec 15, 2021
First published (updated )
latest-version-rails-6.0

Ruby on Rails Rails 6.0Reached end of life

EOL
Jun 1, 2023
Support Ends
Dec 15, 2021
First published (updated )
EOL-rails-6.0
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

There is a possible file content disclosure vulnerability in Action View. This vulnerability has bee…

First published (updated )
https://seclists.org/oss-sec/2019/q1/178

Ruby on Rails Rails 5.2Reached end of life

EOL
Jun 1, 2022
Support Ends
Dec 15, 2021
First published (updated )
latest-version-rails-5.2

Ruby on Rails Rails 5.2Reached end of life

EOL
Jun 1, 2022
Support Ends
Dec 15, 2021
First published (updated )
EOL-rails-5.2

Ruby on Rails Rails 5.1Reached end of life

EOL
Aug 25, 2019
Support Ends
Apr 9, 2018
First published (updated )
EOL-rails-5.1

Ruby on Rails Rails 5.1Reached end of life

EOL
Aug 25, 2019
Support Ends
Apr 9, 2018
First published (updated )
latest-version-rails-5.1
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Ruby on Rails Rails 5.0Reached end of life

EOL
Apr 9, 2018
Support Ends
Apr 9, 2018
First published (updated )
latest-version-rails-5.0

Ruby on Rails Rails 5.0Reached end of life

EOL
Apr 9, 2018
Support Ends
Apr 9, 2018
First published (updated )
EOL-rails-5.0

Ruby on Rails Rails 4.2Reached end of life

EOL
Apr 27, 2017
Support Ends
Jun 30, 2016
First published (updated )
latest-version-rails-4.2

Ruby on Rails Rails 4.2Reached end of life

EOL
Apr 27, 2017
Support Ends
Jun 30, 2016
First published (updated )
EOL-rails-4.2

Mark Evans Dragonfly GemCode Injection

Risk 53
Severity
7.5
First published (updated )
CVE-2013-1756
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203