Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/actionpack@8.1.0
purl pkg:gem/actionpack@8.1.0
Next non-vulnerable version 8.1.2.1
Latest non-vulnerable version 8.1.2.1
Risk 2.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-pd5s-1xsg-f7a5
Aliases:
CVE-2026-33167
GHSA-pgm4-439c-5jp6
Rails has a possible XSS vulnerability in its Action Pack debug exceptions ### Impact The debug exceptions page does not properly escape exception messages. A carefully crafted exception message could inject arbitrary HTML and JavaScript into the page, leading to XSS. This affects applications with detailed exception pages enabled (`config.consider_all_requests_local = true`), which is the default in development. ### Releases The fixed releases are available at the normal locations.
8.1.2.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-02T17:01:20.606210+00:00 GHSA Importer Affected by VCID-pd5s-1xsg-f7a5 https://github.com/advisories/GHSA-pgm4-439c-5jp6 38.1.0