Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how rubyonrails compares to other vendors in security performance

View Risk Score →

rubygems/activestorageRails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests

Risk 27
Severity
2.3
EPSS
0.04%
First published (updated )
CVE-2026-33658

rubygems/activestorageRails Active Storage has possible glob injection in its DiskService

Risk 47
Severity
6.6
EPSS
0.02%
First published (updated )
CVE-2026-33202

rubygems/activestorageRails Active Storage has possible Path Traversal in DiskService

Risk 61
Severity
8
EPSS
0.03%
First published (updated )
CVE-2026-33195

rubygems/activesupportRails Active Support has a possible DoS vulnerability in its number helpers

Risk 31
Severity
6.6
EPSS
0.02%
First published (updated )
CVE-2026-33176

rubygems/activestorageRails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests

Risk 31
Severity
6.6
EPSS
0.02%
First published (updated )
CVE-2026-33174
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

rubygems/activestorageRails Active Storage has possible content type bypass via metadata in direct uploads

Risk 18
Severity
5.3
EPSS
0.02%
First published (updated )
CVE-2026-33173

rubygems/activesupportRails Active Support has a possible XSS vulnerability in SafeBuffer#%

Risk 27
Severity
5.3
EPSS
0.02%
First published (updated )
CVE-2026-33170

rubygems/activesupportRails Active Support has a possible ReDoS vulnerability in number_to_delimited

Risk 23
Severity
6.9
EPSS
0.02%
First published (updated )
CVE-2026-33169

rubygems/rails-html-sanitizerPossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0

Risk 39
Severity
6.1
First published (updated )
CVE-2024-53985

rubygems/rails-html-sanitizerPossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0

Risk 39
Severity
6.1
First published (updated )
CVE-2024-53987
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

rubygems/rails-html-sanitizerPossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0

Risk 39
Severity
6.1
First published (updated )
CVE-2024-53986

rubygems/rails-html-sanitizerPossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0

Risk 39
Severity
6.1
First published (updated )
CVE-2024-53988

rubygems/rails-html-sanitizerPossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0

Risk 39
Severity
6.1
First published (updated )
CVE-2024-53989

rubygems/actiontextActionText ContentAttachment can Contain Unsanitized HTML

Risk 39
Severity
6.1
First published (updated )
CVE-2024-32464

rubygems/actionpackAction Pack is missing security headers on non-HTML responses

Risk 89
Severity
9.8
First published (updated )
CVE-2024-28103
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

rubygems/railsRails Possible XSS Vulnerability in Action Controller

Risk 28
Severity
6.1
EPSS
0.04%
First published (updated )
CVE-2024-26143

rubygems/actionpackRails possible ReDoS vulnerability in Accept header parsing in Action Dispatch

Risk 31
Severity
7.5
EPSS
0.04%
First published (updated )
CVE-2024-26142

redhat/rubygem-activestoragePossible Sensitive Session Information Leak in Active Storage

Risk 20
Severity
5.3
EPSS
0.04%
First published (updated )
CVE-2024-26144

Actionpack Project Actionpack RubyAn open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redire…

Risk 38
Severity
6.1
First published (updated )
CVE-2023-22797

Clockwork Web Project Clockwork WebCSRF

Risk 37
Severity
6.5
First published (updated )
CVE-2023-25015
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

rubygems/actionpackA regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Sp…

Risk 46
Severity
7.5
First published (updated )
CVE-2023-22792

rubyonrails RailsA specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a sta…

Risk 43
Severity
7.5
First published (updated )
CVE-2023-22795

rubygems/globalidThere is a possible DoS vulnerability in the model name parsing section of the GlobalID gem. Careful…

Risk 44
Severity
7.5
First published (updated )
CVE-2023-22799

redhat/rubygem-rails-html-sanitizerPossible XSS vulnerability with certain configurations of rails-html-sanitizer

Risk 46
Severity
7.2
First published (updated )
CVE-2022-23519

redhat/rubygem-rails-html-sanitizerImproper neutralization of data URIs allows XSS in rails-html-sanitizer

Risk 39
Severity
6.1
First published (updated )
CVE-2022-23518
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/rubygem-rails-html-sanitizerInefficient Regular Expression Complexity in rails-html-sanitizer

Risk 45
Severity
7.5
First published (updated )
CVE-2022-23517

redhat/rubygem-rails-html-sanitizerrails-html-sanitizer contains an incomplete fix for an XSS vulnerability

Risk 39
Severity
6.1
First published (updated )
CVE-2022-23520

rubygems/actionpackRuby on Rails _table.html.erb cross site scripting

Risk 35
Severity
5.4
First published (updated )
CVE-2022-3704

Fedoraproject FedoraXSS

Risk 40
Severity
6.1
First published (updated )
CVE-2022-32209

redhat/rubygem-actionviewXSS

Risk 45
Severity
7.5
First published (updated )
CVE-2022-27777
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203