VulnerableCode Package Details - pkg:gem/actionpack@4.2.0.alpha

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:gem/actionpack@4.2.0.alpha

purl	pkg:gem/actionpack@4.2.0.alpha
Tags	Ghost

Next non-vulnerable version	None.
Latest non-vulnerable version	None.
Risk score

Vulnerabilities affecting this package (3)

Advisory	Summary	Fixed in package version
CVE-2016-0751	Possible Object Leak and Denial of Service attack A carefully crafted `Accept` header can cause a global cache of mime …	3.2.22.1 Vulnerable 4.1.14.1 Vulnerable 4.2.5.1 Vulnerable 5.0.0.beta1.1 Vulnerable
CVE-2015-7576	Timing attack vulnerability in basic authentication Due to the way that Action Controller compares user names and passwords in basic …	3.2.22.1 Vulnerable 4.1.14.1 Vulnerable 4.2.5.1 Vulnerable 5.0.0.beta1.1 Vulnerable
CVE-2015-7581	Object leak vulnerability for wildcard controller routes Users that have a route that contains the string `:controller` are susceptible to …	4.1.14.1 Vulnerable 4.2.5.1 Vulnerable

Advisory

Summary

Fixed in package version

CVE-2016-0751

Possible Object Leak and Denial of Service attack A carefully crafted `Accept` header can cause a global cache of mime …

3.2.22.1
Vulnerable

4.1.14.1
Vulnerable

4.2.5.1
Vulnerable

5.0.0.beta1.1
Vulnerable

CVE-2015-7576

Timing attack vulnerability in basic authentication Due to the way that Action Controller compares user names and passwords in basic …

3.2.22.1
Vulnerable

4.1.14.1
Vulnerable

4.2.5.1
Vulnerable

5.0.0.beta1.1
Vulnerable

CVE-2015-7581

Object leak vulnerability for wildcard controller routes Users that have a route that contains the string `:controller` are susceptible to …

4.1.14.1
Vulnerable

4.2.5.1
Vulnerable

This package is not known to fix any advisories.