Search for packages
| purl | pkg:gem/actionpack@6.1.6.1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GMS-2023-56
Aliases: CVE-2023-22795 GHSA-8xww-x3g3-6jcv |
ReDoS based DoS vulnerability in Action Dispatch There is a possible regular expression based DoS vulnerability in Action Dispatch related … |
Vulnerable Vulnerable |
|
GMS-2023-58
Aliases: CVE-2023-22792 GHSA-p84v-45xj-wwqj |
ReDoS based DoS vulnerability in Action Dispatch There is a possible regular expression based DoS vulnerability in Action Dispatch. Specially … |
Vulnerable |
|
CVE-2021-22903
Aliases: GHSA-5hq2-xf89-9jxq |
Possible Open Redirect Vulnerability in Action Pack There is a possible Open Redirect Vulnerability in Action Pack. This vulnerability has … | There are no reported fixed by versions. |
|
CVE-2011-4319
Aliases: GHSA-xxr8-833v-c7wc OSV-77199 |
Cross-site Scripting vulnerability in i18n translations helper method A cross-site scripting (XSS) flaw was found in the way the 'translate' … | There are no reported fixed by versions. |
|
CVE-2020-8185
Aliases: GHSA-c6qr-h5vq-59jc |
Untrusted users able to run pending migrations in production There is a vulnerability in versions of Rails prior to 6.0.3.2 … | There are no reported fixed by versions. |
|
CVE-2012-3463
Aliases: GHSA-98mf-8f57-64qf OSV-84515 |
CVE-2012-3463 rubygem-actionpack: potential XSS vulnerability in select_tag prompt Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_tag_helper.rb in Ruby on Rails 3.x before … | There are no reported fixed by versions. |
|
CVE-2021-22885
Aliases: GHSA-hjg4-8q5f-x6fm |
Possible Information Disclosure / Unintended Method Execution in Action Pack There is a possible information disclosure / unintended method execution … | There are no reported fixed by versions. |
|
CVE-2022-22577
Aliases: GHSA-mm33-5vfq-3mm3 |
Possible XSS Vulnerability in Action Pack There is a possible XSS vulnerability in Rails / Action Pack. This vulnerability has … | There are no reported fixed by versions. |
|
CVE-2014-7829
Aliases: GHSA-h56m-vwxc-3qpw |
Arbitrary file existence disclosure in Action Pack Specially crafted requests can be used to determine whether a file exists on … | There are no reported fixed by versions. |
|
CVE-2009-3086
Aliases: GHSA-fg9w-g6m4-557j |
Moderate severity vulnerability that affects rails A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before 2.3.4, … | There are no reported fixed by versions. |
|
CVE-2024-54133
Aliases: GHSA-vfm5-rmrh-j26v |
Possible Content Security Policy bypass in Action Dispatch There is a possible Cross Site Scripting (XSS) vulnerability in the `content_security_policy` … | There are no reported fixed by versions. |
|
CVE-2013-6416
Aliases: GHSA-w37c-q653-qg95 OSV-100526 |
XSS Vulnerability in simple_format helper There is a vulnerability in the simple_format helper in Ruby on Rails. The simple_format helper … | There are no reported fixed by versions. |
|
CVE-2023-22792
Aliases: GHSA-p84v-45xj-wwqj |
ReDoS based DoS vulnerability in Action Dispatch There is a possible regular expression based DoS vulnerability in Action Dispatch. This … | There are no reported fixed by versions. |
|
CVE-2011-0449
Aliases: GHSA-4ww3-3rxj-8v6q |
Filter Problems on Case-Insensitive Filesystems in rails/actionpack actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is … | There are no reported fixed by versions. |
|
CVE-2021-22904
Aliases: GHSA-7wjx-3g7j-8584 |
Possible DoS Vulnerability in Action Controller Token Authentication There is a possible DoS vulnerability in the Token Authentication logic in … | There are no reported fixed by versions. |
|
CVE-2008-7248
Aliases: GHSA-8fqx-7pv4-3jwm |
Improper Input Validation in rails Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for … | There are no reported fixed by versions. |
|
CVE-2021-22942
Aliases: GHSA-2rqw-v265-jf8c |
Possible Open Redirect in Host Authorization Middleware There is a possible open redirect vulnerability in the Host Authorization middleware in … | There are no reported fixed by versions. |
|
CVE-2021-22881
Aliases: GHSA-8877-prq4-9xfw |
Possible Open Redirect in Host Authorization Middleware There is a possible open redirect vulnerability in the Host Authorization middleware in … | There are no reported fixed by versions. |
|
CVE-2013-6414
Aliases: GHSA-mpxf-gcw2-pw5q OSV-100525 |
Denial of Service Vulnerability in Action View There is a denial of service vulnerability in the header handling component of … | There are no reported fixed by versions. |
|
CVE-2021-44528
Aliases: GHSA-qphc-hf5q-v8fc |
Possible Open Redirect in Host Authorization Middleware There is a possible open redirect vulnerability in the Host Authorization middleware in … | There are no reported fixed by versions. |
|
CVE-2009-3009
Aliases: GHSA-8qrh-h9m2-5fvf OSV-57666 |
Moderate severity XSS vulnerability that affects rails Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x … | There are no reported fixed by versions. |
|
CVE-2011-2929
Aliases: GHSA-r7q2-5gqg-6c7q |
Filter Skipping Vulnerability in Ruby on Rails 3.0/actionpack The template selection functionality in actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before … | There are no reported fixed by versions. |
|
CVE-2022-23633
Aliases: GHSA-wh98-p28r-vrc9 |
Possible exposure of information vulnerability in Action Pack ## Impact Under certain circumstances response bodies will not be closed, for … | There are no reported fixed by versions. |
|
CVE-2020-8264
Aliases: GHSA-35mm-cc6r-8fjp |
Possible XSS Vulnerability in Action Pack in Development Mode There is a possible XSS vulnerability in Action Pack while the … | There are no reported fixed by versions. |
|
CVE-2020-8164
Aliases: GHSA-8727-m6gj-mc37 |
Possible Strong Parameters Bypass in ActionPack There is a strong parameters bypass vector in ActionPack. Versions Affected: rails <= 6.0.3 … | There are no reported fixed by versions. |
|
CVE-2024-41128
Aliases: GHSA-x76w-6vjr-8xgj |
Possible ReDoS vulnerability in query parameter filtering in Action Dispatch There is a possible ReDoS vulnerability in the query parameter … | There are no reported fixed by versions. |
|
CVE-2016-6316
Aliases: GHSA-pc3m-v286-2jwj |
Possible XSS Vulnerability in Action View There is a possible XSS vulnerability in Action View. Text declared as "HTML safe" … | There are no reported fixed by versions. |
|
CVE-2024-28103
Aliases: GHSA-fwhr-88qx-h9g7 |
Missing security headers in Action Pack on non-HTML responses Permissions-Policy is Only Served on HTML Content-Type The application configurable Permissions-Policy … | There are no reported fixed by versions. |
|
CVE-2011-0447
Aliases: GHSA-24fg-p96v-hxh8 |
CSRF Protection Bypass in Ruby on Rails Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, … | There are no reported fixed by versions. |
|
CVE-2011-2931
Aliases: GHSA-v5jg-558j-q67c |
XSS Vulnerability in strip_tags helper in rails/actionpack Cross-site scripting (XSS) vulnerability in the strip_tags helper in actionpack/lib/action_controller/vendor/html-scanner/html/node.rb in Ruby on … | There are no reported fixed by versions. |
|
CVE-2021-22902
Aliases: GHSA-g8ww-46x2-2p65 |
Possible Denial of Service vulnerability in Action Dispatch There is a possible Denial of Service vulnerability in the Mime type … | There are no reported fixed by versions. |
|
CVE-2012-3424
Aliases: GHSA-92w9-2pqw-rhjj OSV-84243 |
CVE-2012-3424 rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before … | There are no reported fixed by versions. |
|
CVE-2011-3187
Aliases: GHSA-3vfw-7rcp-3xgm |
Ruby on rails 3.0.5 Remote_IP.rb Input Validation in rails/actionpack The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip.rb in Ruby on Rails 3.0.5 does … | There are no reported fixed by versions. |
|
CVE-2015-7581
Aliases: GHSA-9h6g-gp95-x3q5 |
Object leak vulnerability for wildcard controller routes in Action Pack There is an object leak vulnerability for wildcard controllers in … | There are no reported fixed by versions. |
|
CVE-2014-7818
Aliases: GHSA-29gr-w57f-rpfw |
Arbitrary file existence disclosure in Action Pack Specially crafted requests can be used to determine whether a file exists on … | There are no reported fixed by versions. |
|
GHSA-vfg9-r3fq-jvx4
Aliases: CVE-2024-47887 |
Possible ReDoS vulnerability in HTTP Token authentication in Action Controller There is a possible ReDoS vulnerability in Action Controller's HTTP … |
Vulnerable |
|
GHSA-x76w-6vjr-8xgj
Aliases: CVE-2024-41128 |
Possible ReDoS vulnerability in query parameter filtering in Action Dispatch There is a possible ReDoS vulnerability in the query parameter … |
Vulnerable |
|
GHSA-vfm5-rmrh-j26v
Aliases: CVE-2024-54133 |
Possible Content Security Policy bypass in Action Dispatch There is a possible Cross Site Scripting (XSS) vulnerability in the `content_security_policy` … |
Vulnerable |
|
GHSA-fwhr-88qx-h9g7
Aliases: CVE-2024-28103 |
Missing security headers in Action Pack on non-HTML responses # Permissions-Policy is Only Served on HTML Content-Type The application configurable … |
Vulnerable |
|
GHSA-p84v-45xj-wwqj
Aliases: CVE-2023-22792 |
ReDoS based DoS vulnerability in Action Dispatch There is a possible regular expression based DoS vulnerability in Action Dispatch. This … |
Vulnerable |
|
GHSA-8xww-x3g3-6jcv
Aliases: CVE-2023-22795 |
ReDoS based DoS vulnerability in Action Dispatch There is a possible regular expression based DoS vulnerability in Action Dispatch related … |
Vulnerable |
|
GHSA-4g8v-vg43-wpgf
Aliases: CVE-2023-28362 |
Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to The `redirect_to` method in Rails allows provided values … |
Vulnerable |
|
GHSA-9chr-4fjh-5rgw
Aliases: CVE-2022-3704 |
Cross-site Scripting in actionpack actionpack from the Ruby on Rails project is vulnerable to Cross-site Scripting in the Route Error … | There are no reported fixed by versions. |
|
GHSA-mm33-5vfq-3mm3
Aliases: CVE-2022-22577 |
Cross-site Scripting Vulnerability in Action Pack There is a possible XSS vulnerability in Rails / Action Pack. This vulnerability has … |
Vulnerable |
|
GHSA-wh98-p28r-vrc9
Aliases: CVE-2022-23633 |
Exposure of information in Action Pack ### Impact Under certain circumstances response bodies will not be closed, for example a … |
Vulnerable |
|
CVE-2024-47887
Aliases: GHSA-vfg9-r3fq-jvx4 |
Possible ReDoS vulnerability in HTTP Token authentication in Action Controller There is a possible ReDoS vulnerability in Action Controller's HTTP … | There are no reported fixed by versions. |