Search for packages
| purl | pkg:gem/activesupport@7.0.4.3 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2009-3086
Aliases: GHSA-fg9w-g6m4-557j |
actionpack and activesupport vulnerable to information leaks A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before … | There are no reported fixed by versions. |
|
CVE-2009-3009
Aliases: GHSA-8qrh-h9m2-5fvf OSV-57666 |
Moderate severity XSS vulnerability that affects rails Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x … | There are no reported fixed by versions. |
|
CVE-2013-1856
Aliases: GHSA-9c2j-593q-3g82 OSV-91451 |
XML Parsing Vulnerability affecting JRuby users The ActiveSupport XML parsing functionality supports multiple pluggable backends. One backend supported for JRuby … | There are no reported fixed by versions. |
|
CVE-2012-1098
Aliases: GHSA-qv8p-v9qw-wc7g OSV-79726 |
CVE-2012-1098 rubygem-activesupport: XSS in SafeBuffer#[] (unescaped safe buffers can be marked as safe) Cross-site scripting (XSS) vulnerability in Ruby on … | There are no reported fixed by versions. |
|
CVE-2015-3226
Aliases: GHSA-vxvp-4xwc-jpp6 |
XSS Vulnerability in ActiveSupport::JSON.encode When a `Hash` containing user-controlled data is encode as JSON (either through `Hash#to_json` or `ActiveSupport::JSON.encode`), Rails … | There are no reported fixed by versions. |
|
CVE-2023-38037
Aliases: GHSA-cr5q-6q9f-rq6q |
Possible File Disclosure of Locally Encrypted Files There is a possible file disclosure of locally encrypted files in Active Support. … | There are no reported fixed by versions. |
|
GHSA-89vf-4333-qx8v
Aliases: CVE-2026-33170 |
Rails Active Support has a possible XSS vulnerability in SafeBuffer#% ### Impact `SafeBuffer#%` does not propagate the `@html_unsafe` flag to … |
Vulnerable |
|
GHSA-2j26-frm8-cmj9
Aliases: CVE-2026-33176 |
Rails Active Support has a possible DoS vulnerability in its number helpers ### Impact Active Support number helpers accept strings … |
Vulnerable |
|
GHSA-cg4j-q9v8-6v38
Aliases: CVE-2026-33169 |
Rails Active Support has a possible ReDoS vulnerability in number_to_delimited ### Impact `NumberToDelimitedConverter` used a regular expression with `gsub!` to … |
Vulnerable |
|
CVE-2026-33170
Aliases: GHSA-89vf-4333-qx8v |
Rails Active Support has a possible XSS vulnerability in SafeBuffer#% `SafeBuffer#%` does not propagate the `@html_unsafe` flag to the newly … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2026-33176
Aliases: GHSA-2j26-frm8-cmj9 |
Rails Active Support has a possible DoS vulnerability in its number helpers Active Support number helpers accept strings containing scientific … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2026-33169
Aliases: GHSA-cg4j-q9v8-6v38 |
Rails Active Support has a possible ReDoS vulnerability in number_to_delimited `NumberToDelimitedConverter` used a regular expression with `gsub!` to insert thousands … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-cr5q-6q9f-rq6q
Aliases: CVE-2023-38037 |
Active Support Possibly Discloses Locally Encrypted Files There is a possible file disclosure of locally encrypted files in Active Support. … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2023-28120
|
Possible XSS Security Vulnerability in SafeBuffer#bytesplice There is a vulnerability in ActiveSupport if the new bytesplice method is called on … |
GHSA-pj73-v5mw-pm9j
|
|
GHSA-pj73-v5mw-pm9j
|
Possible XSS Security Vulnerability in SafeBuffer#bytesplice There is a vulnerability in ActiveSupport if the new bytesplice method is called on … |
CVE-2023-28120
GMS-2023-765 |