Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/activerecord@2.0.1
purl pkg:gem/activerecord@2.0.1
Next non-vulnerable version 7.1.5.2
Latest non-vulnerable version 8.0.2.1
Risk 4.5
Vulnerabilities affecting this package (20)
Vulnerability Summary Fixed by
VCID-18n5-8cur-m7ae
Aliases:
CVE-2012-2661
GHSA-fh39-v733-mxfr
OSV-82403
Active Record vulnerable to SQL Injection via nested query parameters
2.3.14
Affected by 20 other vulnerabilities.
3.0.13
Affected by 18 other vulnerabilities.
3.1.0.beta1
Affected by 21 other vulnerabilities.
3.1.5
Affected by 19 other vulnerabilities.
3.2.0.rc1
Affected by 21 other vulnerabilities.
3.2.4
Affected by 19 other vulnerabilities.
VCID-1ua6-6a16-9fde
Aliases:
CVE-2025-55193
GHSA-76r7-hhxj-r776
7.1.5.2
Affected by 0 other vulnerabilities.
7.2.0.beta1
Affected by 1 other vulnerability.
7.2.2.2
Affected by 0 other vulnerabilities.
8.0.0.beta1
Affected by 1 other vulnerability.
8.0.2.1
Affected by 0 other vulnerabilities.
VCID-2b1z-1k24-kfb8
Aliases:
CVE-2013-3221
GHSA-f57c-hx33-hvh8
The Active Record component in Ruby on Rails 2.3.x, 3.0.x, 3.1.x, and 3.2.x does not ensure that the declared data type of a database column is used during comparisons of input values to stored values in that column, which makes it easier for remote attackers to conduct data-type injection attacks against Ruby on Rails applications via a crafted value, as demonstrated by unintended interaction between the "typed XML" feature and a MySQL database.
4.2.0
Affected by 13 other vulnerabilities.
VCID-34kh-7cbr-s7b9
Aliases:
CVE-2014-3483
GHSA-r8fh-hq2p-7qhq
OSV-108665
security update
4.0.7
Affected by 12 other vulnerabilities.
4.1.0.beta1
Affected by 15 other vulnerabilities.
4.1.3
Affected by 12 other vulnerabilities.
VCID-39m4-12ms-skh2
Aliases:
CVE-2013-0277
GHSA-fhj9-cjjh-27vm
OSV-90073
Multiple vulnerabilities were found in Ruby on Rails, the worst of which allowing for execution of arbitrary code.
2.3.17
Affected by 14 other vulnerabilities.
3.1.0
Affected by 21 other vulnerabilities.
VCID-3ser-nhqn-mbar
Aliases:
CVE-2013-0155
GHSA-gppp-5xc5-wfpx
OSV-89025
Multiple vulnerabilities were found in Ruby on Rails, the worst of which allowing for execution of arbitrary code.
3.0.19
Affected by 16 other vulnerabilities.
3.1.0.beta1
Affected by 21 other vulnerabilities.
3.1.10
Affected by 17 other vulnerabilities.
3.2.0.rc1
Affected by 21 other vulnerabilities.
3.2.11
Affected by 17 other vulnerabilities.
VCID-72jm-58dq-mub5
Aliases:
CVE-2012-2660
GHSA-hgpp-pp89-4fgf
OSV-82610
Action Pack contains database-query restrictions bypass
3.0.13
Affected by 18 other vulnerabilities.
3.1.0.beta1
Affected by 21 other vulnerabilities.
3.1.5
Affected by 19 other vulnerabilities.
3.2.0.rc1
Affected by 21 other vulnerabilities.
3.2.4
Affected by 19 other vulnerabilities.
VCID-74g9-svkp-h3f1
Aliases:
CVE-2014-3482
GHSA-mhwp-qhpc-h3jm
OSV-108664
security update
3.2.19
Affected by 11 other vulnerabilities.
4.0.0
Affected by 17 other vulnerabilities.
VCID-c7qj-hcu8-p7hc
Aliases:
CVE-2022-32224
GHSA-3hhc-qp5v-9p2j
5.2.8.1
Affected by 2 other vulnerabilities.
6.0.0.beta1
Affected by 3 other vulnerabilities.
6.0.5.1
Affected by 3 other vulnerabilities.
6.1.0.rc1
Affected by 3 other vulnerabilities.
6.1.6.1
Affected by 3 other vulnerabilities.
7.0.0.alpha1
Affected by 2 other vulnerabilities.
7.0.3.1
Affected by 3 other vulnerabilities.
VCID-cgfh-yfn7-7ke9
Aliases:
CVE-2008-4094
GHSA-xf96-32q2-9rw2
Multiple vulnerabilities have been discovered in Rails, the worst of which leading to the execution of arbitrary SQL statements.
2.1.1
Affected by 20 other vulnerabilities.
VCID-cvs8-ejdv-uqhy
Aliases:
CVE-2022-44566
GHSA-579w-22j4-4749
GMS-2023-59
6.1.7.1
Affected by 1 other vulnerability.
7.0.4.1
Affected by 1 other vulnerability.
VCID-fbrw-bbm6-fbhp
Aliases:
CVE-2011-0448
GHSA-jmm9-2p29-vh2w
Multiple vulnerabilities were found in Ruby on Rails, the worst of which allowing for execution of arbitrary code.
2.3.11
Affected by 20 other vulnerabilities.
3.0.4
Affected by 20 other vulnerabilities.
3.0.5.rc1
Affected by 20 other vulnerabilities.
VCID-hh3w-dxkg-8ygx
Aliases:
CVE-2013-0276
GHSA-gr44-7grc-37vq
OSV-90072
Multiple vulnerabilities were found in Ruby on Rails, the worst of which allowing for execution of arbitrary code.
2.3.17
Affected by 14 other vulnerabilities.
3.1.11
Affected by 15 other vulnerabilities.
3.2.0.rc1
Affected by 21 other vulnerabilities.
3.2.12
Affected by 15 other vulnerabilities.
VCID-mxkb-wz2d-1kb5
Aliases:
CVE-2014-0080
GHSA-hqf9-rc9j-5fmj
OSV-103438
Array data injection vulnerability in activerecord
3.2.0
Affected by 21 other vulnerabilities.
4.0.3
Affected by 14 other vulnerabilities.
4.1.0.beta1
Affected by 15 other vulnerabilities.
4.1.0.beta2
Affected by 14 other vulnerabilities.
VCID-pbgu-3zaj-ukay
Aliases:
CVE-2012-6496
GHSA-gh2w-j7cx-2664
OSV-88661
A vulnerability in Active Record could allow a remote attacker to inject SQL commands.
2.3.15
Affected by 17 other vulnerabilities.
3.0.18
Affected by 17 other vulnerabilities.
3.1.0.beta1
Affected by 21 other vulnerabilities.
3.1.9
Affected by 18 other vulnerabilities.
3.2.0.rc1
Affected by 21 other vulnerabilities.
3.2.10
Affected by 18 other vulnerabilities.
VCID-rd4z-yncp-qkfu
Aliases:
CVE-2012-2695
GHSA-76wq-xw4h-f8wj
activerecord vulnerable to SQL Injection
2.3.15
Affected by 17 other vulnerabilities.
3.0.14
Affected by 18 other vulnerabilities.
3.1.6
Affected by 19 other vulnerabilities.
3.2.6
Affected by 19 other vulnerabilities.
VCID-rhyd-xbpb-wufa
Aliases:
CVE-2013-1854
GHSA-3crr-9vmg-864v
OSV-91453
Multiple vulnerabilities were found in Ruby on Rails, the worst of which allowing for execution of arbitrary code.
2.3.18
Affected by 14 other vulnerabilities.
3.0.0
Affected by 22 other vulnerabilities.
3.1.12
Affected by 15 other vulnerabilities.
3.2.13
Affected by 15 other vulnerabilities.
VCID-sfaa-e8am-x7gn
Aliases:
CVE-2010-3933
GHSA-gjxw-5w2q-7grf
Multiple vulnerabilities were found in Ruby on Rails, the worst of which allowing for execution of arbitrary code.
2.3.9
Affected by 20 other vulnerabilities.
2.3.10
Affected by 20 other vulnerabilities.
3.0.1
Affected by 20 other vulnerabilities.
VCID-sth3-da79-67bt
Aliases:
CVE-2014-3514
GHSA-9rf5-jm6f-2fmm
Active Record subject to strong parameters protection bypass
4.0.9
Affected by 11 other vulnerabilities.
4.1.0.beta1
Affected by 15 other vulnerabilities.
4.1.5
Affected by 11 other vulnerabilities.
VCID-u2gv-wvdc-tfbs
Aliases:
CVE-2011-2930
GHSA-h6w6-xmqv-7q78
Multiple vulnerabilities were found in Ruby on Rails, the worst of which allowing for execution of arbitrary code.
2.3.13
Affected by 0 other vulnerabilities.
2.3.14
Affected by 20 other vulnerabilities.
3.0.10
Affected by 20 other vulnerabilities.
3.1.0.rc5
Affected by 21 other vulnerabilities.
3.1.0
Affected by 21 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-13T09:26:36.539549+00:00 Ruby Importer Affected by VCID-1ua6-6a16-9fde https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2025-55193.yml 38.6.0
2026-06-13T09:22:17.118718+00:00 Ruby Importer Affected by VCID-c7qj-hcu8-p7hc https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2022-32224.yml 38.6.0
2026-06-13T09:19:44.266986+00:00 Ruby Importer Affected by VCID-fbrw-bbm6-fbhp https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2011-0448.yml 38.6.0
2026-06-13T09:19:34.888198+00:00 Ruby Importer Affected by VCID-sfaa-e8am-x7gn https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2010-3933.yml 38.6.0
2026-06-13T09:19:19.169598+00:00 Ruby Importer Affected by VCID-rd4z-yncp-qkfu https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2012-2695.yml 38.6.0
2026-06-13T09:19:11.303661+00:00 Ruby Importer Affected by VCID-u2gv-wvdc-tfbs https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2011-2930.yml 38.6.0
2026-06-13T09:18:52.428040+00:00 Ruby Importer Affected by VCID-cgfh-yfn7-7ke9 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2008-4094.yml 38.6.0
2026-06-13T09:18:07.761232+00:00 Ruby Importer Affected by VCID-sth3-da79-67bt https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2014-3514.yml 38.6.0
2026-06-13T09:18:05.893424+00:00 Ruby Importer Affected by VCID-74g9-svkp-h3f1 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2014-3482.yml 38.6.0
2026-06-13T09:18:04.480820+00:00 Ruby Importer Affected by VCID-34kh-7cbr-s7b9 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2014-3483.yml 38.6.0
2026-06-13T09:17:58.846762+00:00 Ruby Importer Affected by VCID-mxkb-wz2d-1kb5 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2014-0080.yml 38.6.0
2026-06-13T09:17:35.731411+00:00 Ruby Importer Affected by VCID-2b1z-1k24-kfb8 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2013-3221.yml 38.6.0
2026-06-13T09:17:33.784034+00:00 Ruby Importer Affected by VCID-rhyd-xbpb-wufa https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2013-1854.yml 38.6.0
2026-06-13T09:17:23.807789+00:00 Ruby Importer Affected by VCID-39m4-12ms-skh2 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2013-0277.yml 38.6.0
2026-06-13T09:17:22.238064+00:00 Ruby Importer Affected by VCID-hh3w-dxkg-8ygx https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2013-0276.yml 38.6.0
2026-06-13T09:17:14.897146+00:00 Ruby Importer Affected by VCID-3ser-nhqn-mbar https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2013-0155.yml 38.6.0
2026-06-13T09:17:11.124598+00:00 Ruby Importer Affected by VCID-pbgu-3zaj-ukay https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2012-6496.yml 38.6.0
2026-06-13T09:17:00.231756+00:00 Ruby Importer Affected by VCID-72jm-58dq-mub5 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2012-2660.yml 38.6.0
2026-06-13T09:16:58.734516+00:00 Ruby Importer Affected by VCID-18n5-8cur-m7ae https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2012-2661.yml 38.6.0
2026-06-12T20:09:27.760239+00:00 GitLab Importer Affected by VCID-1ua6-6a16-9fde https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activerecord/CVE-2025-55193.yml 38.6.0
2026-06-12T18:44:23.908732+00:00 GitLab Importer Affected by VCID-cvs8-ejdv-uqhy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activerecord/CVE-2022-44566.yml 38.6.0
2026-06-12T18:27:46.990341+00:00 GitLab Importer Affected by VCID-c7qj-hcu8-p7hc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activerecord/CVE-2022-32224.yml 38.6.0
2026-06-12T18:12:09.077925+00:00 GitLab Importer Affected by VCID-2b1z-1k24-kfb8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activerecord/CVE-2013-3221.yml 38.6.0
2026-06-12T16:55:50.924296+00:00 GitLab Importer Affected by VCID-74g9-svkp-h3f1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activerecord/CVE-2014-3482.yml 38.6.0
2026-06-12T16:55:43.726082+00:00 GitLab Importer Affected by VCID-rd4z-yncp-qkfu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activerecord/CVE-2012-2695.yml 38.6.0
2026-06-12T16:55:27.355512+00:00 GitLab Importer Affected by VCID-cgfh-yfn7-7ke9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activerecord/CVE-2008-4094.yml 38.6.0
2026-06-12T16:55:20.216431+00:00 GitLab Importer Affected by VCID-u2gv-wvdc-tfbs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activerecord/CVE-2011-2930.yml 38.6.0
2026-06-12T16:46:25.666064+00:00 GitLab Importer Affected by VCID-rhyd-xbpb-wufa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activerecord/CVE-2013-1854.yml 38.6.0
2026-06-12T16:46:16.368201+00:00 GitLab Importer Affected by VCID-39m4-12ms-skh2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activerecord/CVE-2013-0277.yml 38.6.0
2026-06-12T16:46:15.258258+00:00 GitLab Importer Affected by VCID-hh3w-dxkg-8ygx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activerecord/CVE-2013-0276.yml 38.6.0
2026-06-12T16:46:11.262157+00:00 GitLab Importer Affected by VCID-3ser-nhqn-mbar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activerecord/CVE-2013-0155.yml 38.6.0