Search for packages
| purl | pkg:gem/activemodel@5.0.0.alpha |
| Tags | Ghost |
| Next non-vulnerable version | 5.0.0.beta1.1 |
| Latest non-vulnerable version | 5.0.0.beta1.1 |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-pb5f-g4uc-r7fp
Aliases: CVE-2016-0753 GHSA-543v-gj2c-r3ch |
Possible Input Validation Circumvention Code that uses Active Model based models (including Active Record models) and does not validate user input before passing it to the model can be subject to an attack where specially crafted input will cause the model to skip validations. Rails users using Strong Parameters are generally not impacted by this issue as they are encouraged to allow parameters and must specifically opt-out of input verification using the `permit!` method to allow mass assignment. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T12:47:00.680162+00:00 | GitLab Importer | Affected by | VCID-pb5f-g4uc-r7fp | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activemodel/CVE-2016-0753.yml | 38.0.0 |