Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/ruby193-rubygem-actionpack@1:3.2.8-5.3?arch=el6
purl pkg:rpm/redhat/ruby193-rubygem-actionpack@1:3.2.8-5.3?arch=el6
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-3wtf-uu89-2qe5
Aliases:
CVE-2014-0081
GHSA-m46p-ggm5-5j83
OSV-103439
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage, or (c) number_to_human helper. There are no reported fixed by versions.
VCID-mep3-6sub-ykdk
Aliases:
CVE-2014-0082
GHSA-7cgp-c3g7-qvrw
OSV-103440
Denial of Service Vulnerability when using render :text Strings sent in specially crafted headers will be converted to symbols. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:48:46.788105+00:00 RedHat Importer Affected by VCID-mep3-6sub-ykdk https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0082.json 38.0.0
2026-04-01T14:48:46.618467+00:00 RedHat Importer Affected by VCID-3wtf-uu89-2qe5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0081.json 38.0.0