Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/actionview@3.2.22.2
purl pkg:gem/actionview@3.2.22.2
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.8
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-pc3m-v286-2jwj
Aliases:
CVE-2016-6316
actionview Cross-site Scripting vulnerability Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before … There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-vx9j-46rh-fqr8
actionview contains Path Traversal vulnerability There is a possible directory traversal and information leak vulnerability in Action View. This was … CVE-2016-2097
GHSA-2pwf-xwr3-hp55
Moderate severity vulnerability that affects actionview Withdrawn, accidental duplicate publish. Directory traversal vulnerability in Action View in Ruby on Rails …