Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/rails@1.2.6-1?distro=trixie
purl pkg:deb/debian/rails@1.2.6-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-9hvm-2hnk-hyev The session fixation protection mechanism in cgi_process.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookie_only attribute from the DEFAULT_SESSION_OPTIONS constant, which effectively causes cookie_only to be applied only to the first instantiation of CgiRequest, which allows remote attackers to conduct session fixation attacks. NOTE: this is due to an incomplete fix for CVE-2007-5380. CVE-2007-6077
GHSA-p4c6-77gc-694x

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T09:51:35.758537+00:00 Debian Importer Fixing VCID-9hvm-2hnk-hyev https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T06:35:32.104277+00:00 Debian Importer Fixing VCID-9hvm-2hnk-hyev https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:51:43.864022+00:00 Debian Importer Fixing VCID-9hvm-2hnk-hyev https://security-tracker.debian.org/tracker/data/json 38.1.0