Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-cj75-f6xr-r4g7
  • RubyGems/rails-html-sanitizer
 Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations 21 Jul
  • Fix available
  • Severity - 5.1 (Medium)
MAL-2026-3634
  • RubyGems/knot-rails-assets-pipeline
 Malicious code in knot-rails-assets-pipeline (RubyGems) 13 May
  • No fix available
MAL-2026-1920
  • RubyGems/rails_structured_logging
 Malicious code in rails_structured_logging (RubyGems) 18 Mar
  • No fix available
MAL-2025-192915
  • RubyGems/rails-structured-logging
 Malicious code in rails-structured-logging (RubyGems) 23 Dec 2025
  • No fix available
MAL-2025-47815
  • RubyGems/sqlcommenter_rails
 Malicious code in sqlcommenter_rails (RubyGems) 26 Sep 2025
  • No fix available
GHSA-vfm5-rmrh-j26v
  • RubyGems/actionpack
 Possible Content Security Policy bypass in Action Dispatch 10 Dec 2024
  • Fix available
  • Severity - 2.3 (Low)
GHSA-rxv5-gxqc-xx8g
  • RubyGems/rails-html-sanitizer
 rails-html-sanitizer has XSS vulnerability with certain configurations 02 Dec 2024
  • Fix available
  • Severity - 2.3 (Low)
GHSA-2x5m-9ch4-qgrr
  • RubyGems/rails-html-sanitizer
 rails-html-sanitizer has XSS vulnerability with certain configurations 02 Dec 2024
  • Fix available
  • Severity - 2.3 (Low)
GHSA-cfjx-w229-hgx5
  • RubyGems/rails-html-sanitizer
 rails-html-sanitizer has XSS vulnerability with certain configurations 02 Dec 2024
  • Fix available
  • Severity - 2.3 (Low)
GHSA-638j-pmjw-jq48
  • RubyGems/rails-html-sanitizer
 rails-html-sanitizer has XSS vulnerability with certain configurations 02 Dec 2024
  • Fix available
  • Severity - 2.3 (Low)
GHSA-w8gc-x259-rc7x
  • RubyGems/rails-html-sanitizer
 rails-html-sanitize has XSS vulnerability with certain configurations 02 Dec 2024
  • Fix available
  • Severity - 2.3 (Low)
GHSA-h47h-mwp9-c6q6
  • RubyGems/actionmailer
 Possible ReDoS vulnerability in block_format in Action Mailer 15 Oct 2024
  • Fix available
  • Severity - 6.6 (Medium)
GHSA-wwhv-wxv9-rpgw
  • RubyGems/actiontext
 Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action Text 15 Oct 2024
  • Fix available
  • Severity - 6.6 (Medium)
GHSA-vfg9-r3fq-jvx4
  • RubyGems/actionpack
 Possible ReDoS vulnerability in HTTP Token authentication in Action Controller 15 Oct 2024
  • Fix available
  • Severity - 6.6 (Medium)
GHSA-x76w-6vjr-8xgj
  • RubyGems/actionpack
 Possible ReDoS vulnerability in query parameter filtering in Action Dispatch 15 Oct 2024
  • Fix available
  • Severity - 6.6 (Medium)
GHSA-8qgm-g2vv-vwvc
  • RubyGems/rails_admin
 RailsAdmin Cross-site Scripting vulnerability in the list view 08 Jul 2024
  • Fix available
  • Severity - 6.1 (Medium)
Load more...