Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/actionview@5.0.0.rc1
purl pkg:gem/actionview@5.0.0.rc1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.8
Vulnerabilities affecting this package (9)
Advisory Summary Fixed in package version
CVE-2020-8167

Cross-Site Request Forgery (CSRF) A CSRF vulnerability exists in rails rails-ujs module that could allow attackers to send CSRF tokens …
6.0.3.1
Vulnerable
CVE-2016-6316

Possible XSS Vulnerability There is a possible XSS vulnerability in Action View. Text declared as "HTML safe" will not have …
4.2.7.1
Vulnerable
5.0.0.1
Vulnerable
CVE-2016-6316
Aliases:
GHSA-pc3m-v286-2jwj
Possible XSS Vulnerability in Action View There is a possible XSS vulnerability in Action View. Text declared as "HTML safe" … There are no reported fixed by versions.
GHSA-v55j-83pf-r9cq
Aliases:
CVE-2026-33168
Rails has a possible XSS vulnerability in its Action View tag helpers ### Impact When a blank string is used …
7.2.3.1
Vulnerable
CVE-2026-33168
Aliases:
GHSA-v55j-83pf-r9cq
Rails has a possible XSS vulnerability in its Action View tag helpers When a blank string is used as an …
7.2.3.1
Vulnerable
8.0.4.1
Vulnerable
8.1.2.1
Vulnerable
7.2.3.1
Vulnerable
8.0.4.1
Vulnerable
8.1.2.1
Vulnerable
CVE-2020-8163

Improper Control of Generation of Code ('Code Injection') The is a code injection vulnerability in versions of Rails that wouldallow …
5.0.1
Vulnerable
5.0.1
Vulnerable
GHSA-cfjv-5498-mph5
Aliases:
CVE-2020-15169
XSS in Action View There is a potential Cross-Site Scripting (XSS) vulnerability in Action View's translation helpers. Views that allow …
5.2.4.4
Vulnerable
6.0.3.3
Vulnerable
5.2.4.4
Vulnerable
GHSA-65cv-r6x7-79hv
Aliases:
CVE-2020-5267
Cross site scripting vulnerability in ActionView There is a possible cross site scripting (XSS) vulnerability in ActionView's JavaScript literal escape …
5.2.4.2
Vulnerable
6.0.2.2
Vulnerable
5.2.4.2
Vulnerable
GHSA-ch3h-j2vf-95pv
Aliases:
CVE-2022-27777
GMS-2022-1138
XSS Vulnerability in Action View tag helpers There is a possible XSS vulnerability in Action View tag helpers. Passing untrusted …
5.2.7.1
Vulnerable
6.0.4.8
Vulnerable
6.1.5.1
Vulnerable
7.0.2.4
Vulnerable
5.2.7.1
Vulnerable
This package is not known to fix any advisories.