Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/rails@2:6.0.3.5%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/rails@2:6.0.3.5%2Bdfsg-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-12x8-jxdf-jqdz Actionpack Open Redirect Vulnerability The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. CVE-2021-22881
GHSA-8877-prq4-9xfw
VCID-5qu2-b8gt-7qe3 Active Record subject to Regular Expression Denial-of-Service (ReDoS) The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the `money` type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulting in the potential for a DoS attack. This only impacts Rails applications that are using PostgreSQL along with money type columns that take user input. CVE-2021-22880
GHSA-8hc4-xxm3-5ppp

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:01:29.886418+00:00 Debian Importer Fixing VCID-12x8-jxdf-jqdz https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:29:11.844806+00:00 Debian Importer Fixing VCID-5qu2-b8gt-7qe3 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T06:43:21.256086+00:00 Debian Importer Fixing VCID-12x8-jxdf-jqdz https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:19:34.724918+00:00 Debian Importer Fixing VCID-5qu2-b8gt-7qe3 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:51:48.197669+00:00 Debian Importer Fixing VCID-12x8-jxdf-jqdz https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:51:48.148838+00:00 Debian Importer Fixing VCID-5qu2-b8gt-7qe3 https://security-tracker.debian.org/tracker/data/json 38.1.0