Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/actionview@4.0.0
purl pkg:gem/actionview@4.0.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 10.0
Vulnerabilities affecting this package (8)
Advisory Summary Fixed in package version
CVE-2016-0752
Aliases:
GHSA-xrr4-p6fq-hjg7
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, …
4.1.14.1
Vulnerable
4.2.5.1
Vulnerable
CVE-2019-5418
Aliases:
GHSA-86g5-2wh3-gc9j
Path Traversal in Action View # File Content Disclosure in Action View Impact ------ There is a possible file content …
4.2.11.1
Vulnerable
5.0.7.2
Vulnerable
5.1.6.2
Vulnerable
5.2.2.1
Vulnerable
GHSA-vx9j-46rh-fqr8
Aliases:
CVE-2016-2097
actionview contains Path Traversal vulnerability There is a possible directory traversal and information leak vulnerability in Action View. This was …
4.1.14.2
Vulnerable
GHSA-xrr4-p6fq-hjg7
Aliases:
CVE-2016-0752
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, …
4.1.14.1
Vulnerable
GHSA-pc3m-v286-2jwj
Aliases:
CVE-2016-6316
actionview Cross-site Scripting vulnerability Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before …
4.2.7.1
Vulnerable
GHSA-2pwf-xwr3-hp55

Moderate severity vulnerability that affects actionview Withdrawn, accidental duplicate publish. Directory traversal vulnerability in Action View in Ruby on Rails …
4.1.14.2
Vulnerable
GHSA-86g5-2wh3-gc9j
Aliases:
CVE-2019-5418
Path Traversal in Action View # File Content Disclosure in Action View Impact ------ There is a possible file content …
4.2.11.1
Vulnerable
GHSA-m63j-wh5w-c252
Aliases:
CVE-2019-5419
# Denial of Service Vulnerability in Action View Impact ------ Specially crafted accept headers can cause the Action View template …
4.2.11.1
Vulnerable
This package is not known to fix any advisories.