VulnerableCode Package Details - pkg:gem/actionview@4.1.3

Vulnerabilities affecting this package (22)

Advisory	Summary	Fixed in package version
CVE-2020-8167	Cross-Site Request Forgery (CSRF) A CSRF vulnerability exists in rails rails-ujs module that could allow attackers to send CSRF tokens …	6.0.3.1 Vulnerable
CVE-2019-5419	Allocation of Resources Without Limits or Throttling There is a possible denial of service vulnerability in Action View (Rails) where …	4.2.11.1 Vulnerable 5.0.7.2 Vulnerable 5.1.6.2 Vulnerable 5.2.2.1 Vulnerable
CVE-2016-0752 Aliases: GHSA-xrr4-p6fq-hjg7	Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, …	4.1.14.1 Vulnerable 4.2.5.1 Vulnerable
CVE-2016-6316	Possible XSS Vulnerability There is a possible XSS vulnerability in Action View. Text declared as "HTML safe" will not have …	4.2.7.1 Vulnerable 5.0.0.1 Vulnerable
CVE-2019-5418 Aliases: GHSA-86g5-2wh3-gc9j	Path Traversal in Action View # File Content Disclosure in Action View Impact ------ There is a possible file content …	4.2.11.1 Vulnerable 5.0.7.2 Vulnerable 5.1.6.2 Vulnerable 5.2.2.1 Vulnerable
CVE-2016-2097	Possible Information Leak Vulnerability Applications that pass unverified user input to the `render` method in a controller may be vulnerable …	4.1.14.2 Vulnerable
CVE-2016-6316 Aliases: GHSA-pc3m-v286-2jwj	Possible XSS Vulnerability in Action View There is a possible XSS vulnerability in Action View. Text declared as "HTML safe" …	There are no reported fixed by versions.
CVE-2016-2097 Aliases: GHSA-vx9j-46rh-fqr8	Possible Information Leak Vulnerability in Action View There is a possible directory traversal and information leak vulnerability in Action View. …	There are no reported fixed by versions.
GHSA-v55j-83pf-r9cq Aliases: CVE-2026-33168	Rails has a possible XSS vulnerability in its Action View tag helpers ### Impact When a blank string is used …	7.2.3.1 Vulnerable
GHSA-cr3x-7m39-c6jq Aliases: CVE-2020-8163	Remote code execution via user-provided local names in ActionView The is a code injection vulnerability in versions of Rails prior …	4.2.11.3 Vulnerable
CVE-2026-33168 Aliases: GHSA-v55j-83pf-r9cq	Rails has a possible XSS vulnerability in its Action View tag helpers When a blank string is used as an …	7.2.3.1 Vulnerable 8.0.4.1 Vulnerable 8.1.2.1 Vulnerable 7.2.3.1 Vulnerable 8.0.4.1 Vulnerable 8.1.2.1 Vulnerable
CVE-2020-8163	Improper Control of Generation of Code ('Code Injection') The is a code injection vulnerability in versions of Rails that wouldallow …	5.0.1 Vulnerable 5.0.1 Vulnerable
GHSA-vx9j-46rh-fqr8 Aliases: CVE-2016-2097	actionview contains Path Traversal vulnerability There is a possible directory traversal and information leak vulnerability in Action View. This was …	4.1.14.2 Vulnerable 4.1.14.2 Vulnerable 4.1.14.2 Vulnerable
GHSA-xrr4-p6fq-hjg7 Aliases: CVE-2016-0752	Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, …	4.1.14.1 Vulnerable 4.2.5.1 Vulnerable 4.1.14.1 Vulnerable 4.2.5.1 Vulnerable 4.1.14.1 Vulnerable
GHSA-pc3m-v286-2jwj Aliases: CVE-2016-6316	actionview Cross-site Scripting vulnerability Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before …	4.2.7.1 Vulnerable 4.2.7.1 Vulnerable 4.2.7.1 Vulnerable
GHSA-cfjv-5498-mph5 Aliases: CVE-2020-15169	XSS in Action View There is a potential Cross-Site Scripting (XSS) vulnerability in Action View's translation helpers. Views that allow …	5.2.4.4 Vulnerable 6.0.3.3 Vulnerable 5.2.4.4 Vulnerable
GHSA-65cv-r6x7-79hv Aliases: CVE-2020-5267	Cross site scripting vulnerability in ActionView There is a possible cross site scripting (XSS) vulnerability in ActionView's JavaScript literal escape …	5.2.4.2 Vulnerable 6.0.2.2 Vulnerable 5.2.4.2 Vulnerable
GHSA-6834-r92f-jj42	Moderate severity vulnerability that affects actionview Withdrawn, accidental duplicate publish. Directory traversal vulnerability in Action View in Ruby on Rails …	4.1.14.1 Vulnerable 4.2.5.1 Vulnerable 4.1.14.1 Vulnerable
GHSA-2pwf-xwr3-hp55	Moderate severity vulnerability that affects actionview Withdrawn, accidental duplicate publish. Directory traversal vulnerability in Action View in Ruby on Rails …	4.1.14.2 Vulnerable 4.1.14.2 Vulnerable
GHSA-86g5-2wh3-gc9j Aliases: CVE-2019-5418	Path Traversal in Action View # File Content Disclosure in Action View Impact ------ There is a possible file content …	5.2.2.1 Vulnerable 4.2.11.1 Vulnerable 5.1.6.2 Vulnerable 5.0.7.2 Vulnerable 4.2.11.1 Vulnerable
GHSA-m63j-wh5w-c252 Aliases: CVE-2019-5419	# Denial of Service Vulnerability in Action View Impact ------ Specially crafted accept headers can cause the Action View template …	4.2.11.1 Vulnerable 5.2.2.1 Vulnerable 5.1.6.2 Vulnerable 5.0.7.2 Vulnerable 4.2.11.1 Vulnerable
GHSA-ch3h-j2vf-95pv Aliases: CVE-2022-27777 GMS-2022-1138	XSS Vulnerability in Action View tag helpers There is a possible XSS vulnerability in Action View tag helpers. Passing untrusted …	5.2.7.1 Vulnerable 6.0.4.8 Vulnerable 6.1.5.1 Vulnerable 7.0.2.4 Vulnerable 5.2.7.1 Vulnerable

Next non-vulnerable version	None.
Latest non-vulnerable version	None.
Risk score	10.0