Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/activejob@4.3
purl pkg:gem/activejob@4.3
Tags Ghost
Next non-vulnerable version 5.0.7.1
Latest non-vulnerable version 5.2.1.1
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-xkt5-d1x6-nbdx
Aliases:
CVE-2018-16476
GHSA-q2qw-rmrh-vv42
Improper Access Control in activejob A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have.
5.0.7.1
Affected by 0 other vulnerabilities.
5.1.6.1
Affected by 0 other vulnerabilities.
5.2.1.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-29T16:16:48.578365+00:00 Ruby Importer Affected by VCID-xkt5-d1x6-nbdx https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activejob/CVE-2018-16476.yml 38.6.0