Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-3630
  • RubyGems/knot-activesupport-logger
Malicious code in knot-activesupport-logger (RubyGems) 13 May
  • No fix available
GHSA-2j26-frm8-cmj9
  • RubyGems/activesupport
Rails Active Support has a possible DoS vulnerability in its number helpers 23 Mar
  • Fix available
  • Severity - 6.6 (Medium)
GHSA-89vf-4333-qx8v
  • RubyGems/activesupport
Rails Active Support has a possible XSS vulnerability in SafeBuffer#% 23 Mar
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-cg4j-q9v8-6v38
  • RubyGems/activesupport
Rails Active Support has a possible ReDoS vulnerability in number_to_delimited 23 Mar
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-cr5q-6q9f-rq6q
  • RubyGems/activesupport
Active Support Possibly Discloses Locally Encrypted Files 23 Aug 2023
  • Fix available
  • Severity - 5.5 (Medium)
GHSA-pj73-v5mw-pm9j
  • RubyGems/activesupport
Possible XSS Security Vulnerability in SafeBuffer#bytesplice 15 Mar 2023
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-j6gc-792m-qgm2
  • RubyGems/activesupport
ReDoS based DoS vulnerability in Active Support's underscore 18 Jan 2023
  • Fix available
GHSA-2p68-f74v-9wc6
  • RubyGems/activesupport
ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore 26 May 2020
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-8qrh-h9m2-5fvf
  • RubyGems/actionpack
  • RubyGems/activesupport
Cross site scripting that affects rails 24 Oct 2017
  • Fix available
GHSA-9fh3-vh3h-q4g3
  • RubyGems/activesupport
activesupport Cross-site Scripting vulnerability 24 Oct 2017
  • Fix available
GHSA-fg9w-g6m4-557j
  • RubyGems/actionpack
  • RubyGems/activesupport
actionpack and activesupport vulnerable to information leaks 24 Oct 2017
  • Fix available
GHSA-qv8p-v9qw-wc7g
  • RubyGems/activesupport
activesupport Cross-site Scripting vulnerability 24 Oct 2017
  • Fix available
GHSA-v9v4-7jp6-8c73
  • RubyGems/actionpack
  • RubyGems/activesupport
rails Cross-site Scripting vulnerability 24 Oct 2017
  • Fix available
GHSA-9c2j-593q-3g82
  • RubyGems/activesupport
activesupport Improper Input Validation vulnerability 24 Oct 2017
  • Fix available
GHSA-h835-75hw-pj89
  • RubyGems/activesupport
activesupport Cross-site Scripting vulnerability 24 Oct 2017
  • Fix available
GHSA-xgr2-v94m-rc9g
  • RubyGems/activesupport
activesupport in Rails vulnerable to incorrect data conversion 24 Oct 2017
  • Fix available