VulnerableCode Package Details - pkg:deb/debian/rails@2:4.2.5.2-1?distro=trixie

Search for packages

Vulnerability	Summary	Fixed by
This package is not known to be affected by vulnerabilities.

Vulnerability

Summary

Fixed by

This package is not known to be affected by vulnerabilities.

Vulnerability	Summary	Aliases
VCID-s5ah-tf63-a7cw	Improper Input Validation The Rails gem allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.	CVE-2016-2098 GHSA-78rc-8c29-p45g
VCID-z1jv-4ga2-7kd1	Possible Information Leak Vulnerability Applications that pass unverified user input to the `render` method in a controller may be vulnerable to an information leak vulnerability. Impacted code will look something like this: ``` def index; render params[:id]; end ``` Carefully crafted requests can cause the above code to render files from unexpected places like outside the application's view directory, and can possibly escalate this to a remote code execution attack.	CVE-2016-2097 GHSA-vx9j-46rh-fqr8

Vulnerability

Summary

Aliases

VCID-s5ah-tf63-a7cw

Improper Input Validation The Rails gem allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.

CVE-2016-2098
GHSA-78rc-8c29-p45g

VCID-z1jv-4ga2-7kd1

Possible Information Leak Vulnerability Applications that pass unverified user input to the `render` method in a controller may be vulnerable to an information leak vulnerability. Impacted code will look something like this: ``` def index; render params[:id]; end ``` Carefully crafted requests can cause the above code to render files from unexpected places like outside the application's view directory, and can possibly escalate this to a remote code execution attack.

CVE-2016-2097
GHSA-vx9j-46rh-fqr8

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-16T11:01:35.274288+00:00	Debian Importer	Fixing	VCID-z1jv-4ga2-7kd1	https://security-tracker.debian.org/tracker/data/json	38.4.0
2026-04-16T08:39:43.024368+00:00	Debian Importer	Fixing	VCID-s5ah-tf63-a7cw	https://security-tracker.debian.org/tracker/data/json	38.4.0
2026-04-13T07:29:52.737661+00:00	Debian Importer	Fixing	VCID-z1jv-4ga2-7kd1	https://security-tracker.debian.org/tracker/data/json	38.3.0
2026-04-11T17:49:21.500702+00:00	Debian Importer	Fixing	VCID-s5ah-tf63-a7cw	https://security-tracker.debian.org/tracker/data/json	38.3.0
2026-04-03T07:51:47.084673+00:00	Debian Importer	Fixing	VCID-s5ah-tf63-a7cw	https://security-tracker.debian.org/tracker/data/json	38.1.0
2026-04-03T07:51:47.035838+00:00	Debian Importer	Fixing	VCID-z1jv-4ga2-7kd1	https://security-tracker.debian.org/tracker/data/json	38.1.0