Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/tfm-rubygem-activerecord@6.1.7-1?arch=el8sat
purl pkg:rpm/redhat/tfm-rubygem-activerecord@6.1.7-1?arch=el8sat
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-n8r7-wthv-fqaj
Aliases:
CVE-2022-32224
GHSA-3hhc-qp5v-9p2j
GMS-2022-3029
Active Record RCE bug with Serialized Columns When serialized columns that use YAML (the default) are deserialized, Rails uses YAML.unsafe_load to convert the YAML data in to Ruby objects. If an attacker can manipulate data in the database (via means like SQL injection), then it may be possible for the attacker to escalate to an RCE. There are no feasible workarounds for this issue, but other coders (such as JSON) are not impacted. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:58:00.923615+00:00 RedHat Importer Affected by VCID-n8r7-wthv-fqaj https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32224.json 38.0.0