Where
-Infinity
0

Trending

Last week
Last month
Last year

rubygems/activestorageRails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests

Risk 27
Severity
2.3
EPSS
0.04%
First published (updated )
CVE-2026-33658

rubygems/activestorageRails Active Storage has possible glob injection in its DiskService

Risk 47
Severity
6.6
EPSS
0.02%
First published (updated )
CVE-2026-33202

rubygems/activestorageRails Active Storage has possible Path Traversal in DiskService

Risk 61
Severity
8
EPSS
0.03%
First published (updated )
CVE-2026-33195

rubygems/activesupportRails Active Support has a possible DoS vulnerability in its number helpers

Risk 31
Severity
6.6
EPSS
0.02%
First published (updated )
CVE-2026-33176

rubygems/activestorageRails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests

Risk 31
Severity
6.6
EPSS
0.02%
First published (updated )
CVE-2026-33174
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

rubygems/activestorageRails Active Storage has possible content type bypass via metadata in direct uploads

Risk 18
Severity
5.3
EPSS
0.02%
First published (updated )
CVE-2026-33173

rubygems/activesupportRails Active Support has a possible XSS vulnerability in SafeBuffer#%

Risk 27
Severity
5.3
EPSS
0.02%
First published (updated )
CVE-2026-33170

rubygems/activesupportRails Active Support has a possible ReDoS vulnerability in number_to_delimited

Risk 23
Severity
6.9
EPSS
0.02%
First published (updated )
CVE-2026-33169

rubygems/railsRails Possible XSS Vulnerability in Action Controller

Risk 28
Severity
6.1
EPSS
0.04%
First published (updated )
CVE-2024-26143

rubygems/actionpackRails possible ReDoS vulnerability in Accept header parsing in Action Dispatch

Risk 31
Severity
7.5
EPSS
0.04%
First published (updated )
CVE-2024-26142
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/rubygem-activestoragePossible Sensitive Session Information Leak in Active Storage

Risk 20
Severity
5.3
EPSS
0.04%
First published (updated )
CVE-2024-26144

rubygems/actionpackA regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Sp…

Risk 46
Severity
7.5
First published (updated )
CVE-2023-22792

rubyonrails RailsA specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a sta…

Risk 43
Severity
7.5
First published (updated )
CVE-2023-22795

rubygems/actionpackRuby on Rails _table.html.erb cross site scripting

Risk 35
Severity
5.4
First published (updated )
CVE-2022-3704

redhat/railsExposure of sensitive information in Action Pack

Risk 59
Severity
7.4
First published (updated )
CVE-2022-23633
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/rubygem-railsInformation Exposure when using Puma with Rails

Risk 62
Severity
8
First published (updated )
CVE-2022-23634

debian/railsA possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 …

Risk 39
Severity
6.1
First published (updated )
CVE-2021-22942

rubyonrails RailsThe actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability. Speciall…

Risk 38
Severity
6.1
First published (updated )
CVE-2021-22903

rubygems/actionpackA flaw was found in RubyGem Actionpack which is framework for handling and responding to web request…

Risk 44
Severity
7.5
First published (updated )
CVE-2021-22902

rubygems/actionpackA flaw was found in RubyGem Actionpack which is framework for handling and responding to web request…

Risk 44
Severity
7.5
First published (updated )
CVE-2021-22904
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/rubygem-actionpackInfoleak

Risk 43
Severity
7.5
First published (updated )
CVE-2021-22885

rubyonrails RailsThe Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redire…

Risk 38
Severity
6.1
First published (updated )
CVE-2021-22881

rubyonrails RailsInput Validation

Risk 43
Severity
7.5
First published (updated )
CVE-2021-22880

rubyonrails RailsCSRF

Risk 22
Severity
4.3
First published (updated )
CVE-2020-8166

Debian Debian LinuxThe encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.

Risk 38
Severity
6.5
First published (updated )
CVE-2010-3299
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/rubygem-actionviewRails Ruby on Rails Path Traversal Vulnerability

Risk 65
Severity
7.5
Exploited
First published (updated )
CVE-2019-5418

rubyonrails RailsRuby on Rails Directory Traversal Vulnerability

Risk 65
Severity
7.5
Exploited
First published (updated )
CVE-2016-0752

rubyonrails RailsRuby on Rails Directory Traversal Vulnerability

Risk 65
Severity
7.5
Exploited
First published (updated )
CVE-2014-0130

rubyonrails RailsXSS

Risk 22
Severity
4.3
First published (updated )
CVE-2014-0081

rubyonrails RailsSQL Injection

Risk 47
Severity
6.8
First published (updated )
CVE-2014-0080
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203