Search for packages
| purl | pkg:gem/rails@6.0.3.2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2021-22885
|
Possible Information Disclosure / Unintended Method Execution There is a possible information disclosure / unintended method execution vulnerability in Action … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2023-22792
|
Inefficient Regular Expression Complexity A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Specially crafted cookies, … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-22904
|
Uncontrolled Resource Consumption There is a possible DoS vulnerability in the Token Authentication logic in Action Controller. Impacted code uses … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2021-22942
|
URL Redirection to Untrusted Site ('Open Redirect') A possible open redirect vulnerability in the Host Authorization middleware in Action Pack … |
Vulnerable Vulnerable |
|
CVE-2023-22795
|
Inefficient Regular Expression Complexity A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match … |
Vulnerable Vulnerable |
|
CVE-2021-22881
|
URL Redirection to Untrusted Site (Open Redirect) The Host Authorization middleware in Action Pack suffers from an open redirect vulnerability. … |
Vulnerable Vulnerable |
|
CVE-2020-8264
|
Cross-site Scripting In actionpack gem, a possible XSS vulnerability exists when an application is running in development mode allowing an … |
Vulnerable |
|
CVE-2021-22880
|
Uncontrolled Resource Consumption The PostgreSQL adapter in Active Record suffers from a regular expression denial of service (REDoS) vulnerability. Carefully … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-22902
|
Uncontrolled Resource Consumption There is a possible Denial of Service vulnerability in Action Dispatch. Carefully crafted `Accept` headers can cause … |
Vulnerable Vulnerable |
|
CVE-2006-4112
Aliases: GHSA-9wrq-xvmp-xjc8 |
High severity vulnerability that affects rails. Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 … | There are no reported fixed by versions. |
|
CVE-2006-4111
Aliases: GHSA-rvpq-5xqx-pfpp |
High severity vulnerability that affects rails Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" … | There are no reported fixed by versions. |
|
CVE-2022-23633
Aliases: GHSA-wh98-p28r-vrc9 |
Exposure of information in Action Pack Action Pack is a framework for handling and responding to web requests. Under certain … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2024-26144
Aliases: GHSA-8h22-8cf7-hq6g |
Rails has possible Sensitive Session Information Leak in Active Storage # Possible Sensitive Session Information Leak in Active Storage There … |
Vulnerable Vulnerable Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2020-8185
|
Uncontrolled Resource Consumption A denial of service vulnerability allows an untrusted user to run any pending migrations on an app … |