Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/activerecord@2.1.1
purl pkg:gem/activerecord@2.1.1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-c3hd-njh3-b3bg Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) :limit and (2) :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer. CVE-2008-4094
GHSA-xf96-32q2-9rw2

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T00:50:03.625399+00:00 GHSA Importer Fixing VCID-c3hd-njh3-b3bg https://github.com/advisories/GHSA-xf96-32q2-9rw2 38.6.0
2026-05-30T20:53:09.158716+00:00 GitLab Importer Fixing VCID-c3hd-njh3-b3bg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/activerecord/CVE-2008-4094.yml 38.6.0