Search for packages
| purl | pkg:gem/actionview@4.2.5 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2020-8167
|
Cross-Site Request Forgery (CSRF) A CSRF vulnerability exists in rails rails-ujs module that could allow attackers to send CSRF tokens … |
Vulnerable |
|
CVE-2019-5419
|
Allocation of Resources Without Limits or Throttling There is a possible denial of service vulnerability in Action View (Rails) where … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2016-0752
Aliases: GHSA-xrr4-p6fq-hjg7 |
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, … |
Vulnerable Vulnerable |
|
CVE-2016-6316
|
Possible XSS Vulnerability There is a possible XSS vulnerability in Action View. Text declared as "HTML safe" will not have … |
Vulnerable Vulnerable |
|
CVE-2019-5418
Aliases: GHSA-86g5-2wh3-gc9j |
Path Traversal in Action View # File Content Disclosure in Action View Impact ------ There is a possible file content … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2016-6316
Aliases: GHSA-pc3m-v286-2jwj |
Possible XSS Vulnerability in Action View There is a possible XSS vulnerability in Action View. Text declared as "HTML safe" … | There are no reported fixed by versions. |
|
GHSA-v55j-83pf-r9cq
Aliases: CVE-2026-33168 |
Rails has a possible XSS vulnerability in its Action View tag helpers ### Impact When a blank string is used … |
Vulnerable |
|
GHSA-cr3x-7m39-c6jq
Aliases: CVE-2020-8163 |
Remote code execution via user-provided local names in ActionView The is a code injection vulnerability in versions of Rails prior … |
Vulnerable |
|
CVE-2026-33168
Aliases: GHSA-v55j-83pf-r9cq |
Rails has a possible XSS vulnerability in its Action View tag helpers When a blank string is used as an … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2020-8163
|
Improper Control of Generation of Code ('Code Injection') The is a code injection vulnerability in versions of Rails that wouldallow … |
Vulnerable Vulnerable |
|
GHSA-xrr4-p6fq-hjg7
Aliases: CVE-2016-0752 |
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-pc3m-v286-2jwj
Aliases: CVE-2016-6316 |
actionview Cross-site Scripting vulnerability Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-cfjv-5498-mph5
Aliases: CVE-2020-15169 |
XSS in Action View There is a potential Cross-Site Scripting (XSS) vulnerability in Action View's translation helpers. Views that allow … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-65cv-r6x7-79hv
Aliases: CVE-2020-5267 |
Cross site scripting vulnerability in ActionView There is a possible cross site scripting (XSS) vulnerability in ActionView's JavaScript literal escape … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-6834-r92f-jj42
|
Moderate severity vulnerability that affects actionview Withdrawn, accidental duplicate publish. Directory traversal vulnerability in Action View in Ruby on Rails … |
Vulnerable Vulnerable |
|
GHSA-86g5-2wh3-gc9j
Aliases: CVE-2019-5418 |
Path Traversal in Action View # File Content Disclosure in Action View Impact ------ There is a possible file content … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-m63j-wh5w-c252
Aliases: CVE-2019-5419 |
# Denial of Service Vulnerability in Action View Impact ------ Specially crafted accept headers can cause the Action View template … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-ch3h-j2vf-95pv
Aliases: CVE-2022-27777 GMS-2022-1138 |
XSS Vulnerability in Action View tag helpers There is a possible XSS vulnerability in Action View tag helpers. Passing untrusted … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |