Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/actionpack@3.2.22.0
purl pkg:gem/actionpack@3.2.22.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.4
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-ffpv-c4hm-3x6v
Aliases:
CVE-2016-0751
actionpack is vulnerable to denial of service via a crafted HTTP Accept header actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on …
3.2.22.1
Vulnerable
3.2.22.1
Vulnerable
3.2.22.1
Vulnerable
GHSA-p692-7mm3-3fxg
Aliases:
CVE-2015-7576
actionpack is vulnerable to remote bypass authentication The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller …
3.2.22.1
Vulnerable
3.2.22.1
Vulnerable
3.2.22.1
Vulnerable
GHSA-m53f-rhq8-q6hf

Moderate severity vulnerability that affects actionpack Withdrawn, accidental duplicate publish. actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, …
3.2.22.1
Vulnerable
3.2.22.1
Vulnerable
GHSA-vwfg-qj3r-6v3r

Moderate severity vulnerability that affects actionpack Withdrawn, accidental duplicate publish. The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation …
3.2.22.1
Vulnerable
3.2.22.1
Vulnerable
This package is not known to fix any advisories.