Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-pgm4-439c-5jp6
  • RubyGems/actionpack
 Rails has a possible XSS vulnerability in its Action Pack debug exceptions 23 Mar
  • Fix available
  • Severity - 1.3 (Low)
GHSA-vfm5-rmrh-j26v
  • RubyGems/actionpack
 Possible Content Security Policy bypass in Action Dispatch 10 Dec 2024
  • Fix available
  • Severity - 2.3 (Low)
GHSA-vfg9-r3fq-jvx4
  • RubyGems/actionpack
 Possible ReDoS vulnerability in HTTP Token authentication in Action Controller 15 Oct 2024
  • Fix available
  • Severity - 6.6 (Medium)
GHSA-x76w-6vjr-8xgj
  • RubyGems/actionpack
 Possible ReDoS vulnerability in query parameter filtering in Action Dispatch 15 Oct 2024
  • Fix available
  • Severity - 6.6 (Medium)
GHSA-fwhr-88qx-h9g7
  • RubyGems/actionpack
 Missing security headers in Action Pack on non-HTML responses 04 Jun 2024
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-9822-6m93-xqf4
  • RubyGems/actionpack
  • RubyGems/rails
 Rails has possible XSS Vulnerability in Action Controller 27 Feb 2024
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-jjhx-jhvp-74wq
  • RubyGems/actionpack
 Rails has possible ReDoS vulnerability in Accept header parsing in Action Dispatch 27 Feb 2024
  • Fix available
GHSA-4g8v-vg43-wpgf
  • RubyGems/actionpack
 Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to 29 Jun 2023
  • Fix available
  • Severity - 4.0 (Medium)
GHSA-p84v-45xj-wwqj
  • RubyGems/actionpack
 ReDoS based DoS vulnerability in Action Dispatch 18 Jan 2023
  • Fix available
GHSA-9445-4cr6-336r
  • RubyGems/actionpack
 Open Redirect Vulnerability in Action Pack 18 Jan 2023
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-8xww-x3g3-6jcv
  • RubyGems/actionpack
 ReDoS based DoS vulnerability in Action Dispatch 18 Jan 2023
  • Fix available
GHSA-mm33-5vfq-3mm3
  • RubyGems/actionpack
 Cross-site Scripting Vulnerability in Action Pack 27 Apr 2022
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-q58j-fmvf-9rq6
  • RubyGems/actionpack
 Cross site scripting in actionpack Rubygem 22 Apr 2022
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-wh98-p28r-vrc9
  • RubyGems/actionpack
 Exposure of information in Action Pack 11 Feb 2022
  • Fix available
  • Severity - 7.4 (High)
GHSA-qphc-hf5q-v8fc
  • RubyGems/actionpack
 actionpack Open Redirect in Host Authorization Middleware 14 Dec 2021
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-2rqw-v265-jf8c
  • RubyGems/actionpack
 Open Redirect in ActionPack 26 Aug 2021
  • Fix available
  • Severity - 6.1 (Medium)
Load more...