Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/activemodel@4.1.0.rc2
purl pkg:gem/activemodel@4.1.0.rc2
Next non-vulnerable version 4.1.14.1
Latest non-vulnerable version 5.0.0.beta1.1
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-pb5f-g4uc-r7fp
Aliases:
CVE-2016-0753
GHSA-543v-gj2c-r3ch
Possible Input Validation Circumvention Code that uses Active Model based models (including Active Record models) and does not validate user input before passing it to the model can be subject to an attack where specially crafted input will cause the model to skip validations. Rails users using Strong Parameters are generally not impacted by this issue as they are encouraged to allow parameters and must specifically opt-out of input verification using the `permit!` method to allow mass assignment.
4.1.14.1
Affected by 0 other vulnerabilities.
4.2.5.1
Affected by 0 other vulnerabilities.
5.0.0.beta1.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-11T21:43:49.691683+00:00 GitLab Importer Affected by VCID-pb5f-g4uc-r7fp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activemodel/CVE-2016-0753.yml 38.3.0
2026-04-02T21:57:57.509099+00:00 GitLab Importer Affected by VCID-pb5f-g4uc-r7fp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activemodel/CVE-2016-0753.yml 38.1.0
2026-04-01T16:15:08.964275+00:00 GitLab Importer Affected by VCID-pb5f-g4uc-r7fp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activemodel/CVE-2016-0753.yml 38.0.0