Filter
-Infinity
0
Trending
Ruby on RailsActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a …
10
First published (updated )
rubygems/actionpackAction Pack is missing security headers on non-HTML responses
9.8
First published (updated )
Apple iOS and macOSThe example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rai…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Debian LinuxA deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/rubygem-railsInformation Exposure when using Puma with Rails
8
First published (updated )
rubygems/actionpackRails possible ReDoS vulnerability in Accept header parsing in Action Dispatch
7.5
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ruby on RailsRuby on Rails Directory Traversal Vulnerability
First published (updated )
rubygems/globalidThere is a possible DoS vulnerability in the model name parsing section of the GlobalID gem. Careful…
7.5
First published (updated )
redhat/rubygem-rails-html-sanitizerInefficient Regular Expression Complexity in rails-html-sanitizer
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
rubygems/actionpackA flaw was found in RubyGem Actionpack which is framework for handling and responding to web request…
7.5
First published (updated )
rubygems/actionpackA flaw was found in RubyGem Actionpack which is framework for handling and responding to web request…
7.5
First published (updated )
Ruby on RailsUnspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ruby on Railsactionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-ins…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.