Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/rails@6.0.6.1
purl pkg:gem/rails@6.0.6.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
CVE-2023-22795

Inefficient Regular Expression Complexity A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match …
7.0.4.1
Vulnerable
6.1.7.1
Vulnerable
CVE-2006-4112
Aliases:
GHSA-9wrq-xvmp-xjc8
High severity vulnerability that affects rails. Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 … There are no reported fixed by versions.
CVE-2006-4111
Aliases:
GHSA-rvpq-5xqx-pfpp
High severity vulnerability that affects rails Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" … There are no reported fixed by versions.
CVE-2021-44528

URL Redirection to Untrusted Site ('Open Redirect') A open redirect vulnerability exists in Action Pack that could allow an attacker …
6.1.4.3
Vulnerable
7.0.1
Vulnerable
6.1.4.3
Vulnerable
7.0.1
Vulnerable
CVE-2024-26144
Aliases:
GHSA-8h22-8cf7-hq6g
Rails has possible Sensitive Session Information Leak in Active Storage # Possible Sensitive Session Information Leak in Active Storage There …
7.0.8.1
Vulnerable
6.1.7.7
Vulnerable
7.0.8.1
Vulnerable
6.1.7.7
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2023-22792
Inefficient Regular Expression Complexity A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Specially crafted cookies, …