Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-pmwx-rm49-xv39
  • RubyGems/activerecord-tenanted
ActiveRecord::Tenanted::Storage::DiskService#path_for has a possible path traversal 29 Jul
  • Fix available
  • Severity - 2.3 (Low)
GHSA-5qw5-wf2q-f538
  • RubyGems/activerecord-jdbc-adapter
ActiveRecord-JDBC-Adapter (AR-JDBC) lib/arjdbc/jdbc/adapter.rb sql.gsub() Function SQL Injection 16 Jan
  • Fix available
  • Severity - 8.8 (High)
GHSA-76r7-hhxj-r776
  • RubyGems/activerecord
Active Record logging vulnerable to ANSI escape injection 13 Aug 2025
  • Fix available
  • Severity - 5.3 (Medium)
MAL-2024-6874
  • RubyGems/dragonfly_activerecord
Malicious code in dragonfly_activerecord (RubyGems) 25 Jun 2024
  • No fix available
MAL-2024-6486
  • RubyGems/activerecord_postgresql-expression
Malicious code in activerecord_postgresql-expression (RubyGems) 25 Jun 2024
  • No fix available
MAL-2024-6487
  • RubyGems/activerecord_publishable
Malicious code in activerecord_publishable (RubyGems) 25 Jun 2024
  • No fix available
MAL-2024-6485
  • RubyGems/activerecord_locking-symbolic
Malicious code in activerecord_locking-symbolic (RubyGems) 25 Jun 2024
  • No fix available
MAL-2024-6483
  • RubyGems/activerecord_jdbcsplice-adapter
Malicious code in activerecord_jdbcsplice-adapter (RubyGems) 25 Jun 2024
  • No fix available
MAL-2024-6484
  • RubyGems/activerecord_like
Malicious code in activerecord_like (RubyGems) 25 Jun 2024
  • No fix available
MAL-2024-6481
  • RubyGems/activerecord_duplicate
Malicious code in activerecord_duplicate (RubyGems) 25 Jun 2024
  • No fix available
MAL-2024-6482
  • RubyGems/activerecord_implicit-order
Malicious code in activerecord_implicit-order (RubyGems) 25 Jun 2024
  • No fix available
MAL-2024-6480
  • RubyGems/activerecord_denormalize
Malicious code in activerecord_denormalize (RubyGems) 25 Jun 2024
  • No fix available
MAL-2024-6478
  • RubyGems/activerecord_databasevalidations
Malicious code in activerecord_databasevalidations (RubyGems) 25 Jun 2024
  • No fix available
MAL-2024-6479
  • RubyGems/activerecord_db-tools
Malicious code in activerecord_db-tools (RubyGems) 25 Jun 2024
  • No fix available
MAL-2024-6477
  • RubyGems/activerecord-suppress-range_error
Malicious code in activerecord-suppress-range_error (RubyGems) 25 Jun 2024
  • No fix available
MAL-2024-6476
  • RubyGems/activerecord-strict_validations
Malicious code in activerecord-strict_validations (RubyGems) 25 Jun 2024
  • No fix available