Search for packages
| purl | pkg:rpm/redhat/ror40-rubygem-activerecord@1:4.0.2-2.3?arch=el6 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2efj-tf8d-dfck
Aliases: CVE-2014-3514 GHSA-9rf5-jm6f-2fmm |
Strong Parameter bypass with create_with The `create_with` functionality in Active Record was implemented incorrectly and completely bypasses the strong parameter protection. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:46:26.978434+00:00 | RedHat Importer | Affected by | VCID-2efj-tf8d-dfck | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3514.json | 38.0.0 |