Search for packages
| purl | pkg:gem/actionmailer@3.2.15 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1g4f-hrwm-q3gh
Aliases: CVE-2024-47889 GHSA-h47h-mwp9-c6q6 |
Possible ReDoS vulnerability in block_format in Action Mailer There is a possible ReDoS vulnerability in the block_format helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact ------ Carefully crafted text can cause the block_format helper to take an unexpected amount of time, possibly resulting in a DoS vulnerability. All users running an affected release should either upgrade or apply the relevant patch immediately. Ruby 3.2 has mitigations for this problem, so Rails applications using Ruby 3.2 or newer are unaffected. Rails 8.0.0.beta1 requires Ruby 3.2 or greater so is unaffected. Releases -------- The fixed releases are available at the normal locations. Workarounds ----------- Users can avoid calling the `block_format` helper or upgrade to Ruby 3.2 Credits ------- Thanks to yuki_osaki for the report! |
Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-7fe5-pa3v-wfcq | actionmailer email address processing causes Denial of service Multiple format string vulnerabilities in log_subscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message. |
CVE-2013-4389
GHSA-rg5m-3fqp-6px8 OSV-98629 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-05-30T07:04:00.929277+00:00 | GitLab Importer | Affected by | VCID-1g4f-hrwm-q3gh | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/actionmailer/CVE-2024-47889.yml | 38.6.0 |
| 2026-05-30T00:00:58.953066+00:00 | Ruby Importer | Affected by | VCID-1g4f-hrwm-q3gh | https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionmailer/CVE-2024-47889.yml | 38.6.0 |
| 2026-05-29T17:29:18.194053+00:00 | GitLab Importer | Fixing | VCID-7fe5-pa3v-wfcq | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/actionmailer/CVE-2013-4389.yml | 38.6.0 |
| 2026-05-29T14:21:39.424528+00:00 | GHSA Importer | Fixing | VCID-7fe5-pa3v-wfcq | https://github.com/advisories/GHSA-rg5m-3fqp-6px8 | 38.6.0 |
| 2026-05-29T08:57:21.540062+00:00 | GithubOSV Importer | Fixing | VCID-7fe5-pa3v-wfcq | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2017/10/GHSA-rg5m-3fqp-6px8/GHSA-rg5m-3fqp-6px8.json | 38.6.0 |