Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/ruby193-rubygem-activerecord@1:3.0.13-3?arch=el6op
purl pkg:rpm/redhat/ruby193-rubygem-activerecord@1:3.0.13-3?arch=el6op
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-kkbt-pr7u-f7gn
Aliases:
CVE-2012-6496
GHSA-gh2w-j7cx-2664
OSV-88661
Active Record contains SQL Injection SQL injection vulnerability in the Active Record component in Ruby on Rails before 2.3.15, 3.0.x before 3.0.18, 3.1.x before 3.1.9, and 3.2.x before 3.2.10 allows remote attackers to execute arbitrary SQL commands via a crafted request that leverages incorrect behavior of dynamic finders in applications that can use unexpected data types in certain find_by_ method calls. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:53:22.810448+00:00 RedHat Importer Affected by VCID-kkbt-pr7u-f7gn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6496.json 38.0.0