Search for packages
| purl | pkg:gem/actionview@5.0.1.rc2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2020-8167
|
Cross-Site Request Forgery (CSRF) A CSRF vulnerability exists in rails rails-ujs module that could allow attackers to send CSRF tokens … |
Vulnerable |
|
CVE-2019-5419
|
Allocation of Resources Without Limits or Throttling There is a possible denial of service vulnerability in Action View (Rails) where … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2019-5418
Aliases: GHSA-86g5-2wh3-gc9j |
Path Traversal in Action View # File Content Disclosure in Action View Impact ------ There is a possible file content … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2016-6316
Aliases: GHSA-pc3m-v286-2jwj |
Possible XSS Vulnerability in Action View There is a possible XSS vulnerability in Action View. Text declared as "HTML safe" … | There are no reported fixed by versions. |
|
GHSA-v55j-83pf-r9cq
Aliases: CVE-2026-33168 |
Rails has a possible XSS vulnerability in its Action View tag helpers ### Impact When a blank string is used … |
Vulnerable |
|
CVE-2026-33168
Aliases: GHSA-v55j-83pf-r9cq |
Rails has a possible XSS vulnerability in its Action View tag helpers When a blank string is used as an … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2020-8163
|
Improper Control of Generation of Code ('Code Injection') The is a code injection vulnerability in versions of Rails that wouldallow … |
Vulnerable Vulnerable |
|
GHSA-cfjv-5498-mph5
Aliases: CVE-2020-15169 |
XSS in Action View There is a potential Cross-Site Scripting (XSS) vulnerability in Action View's translation helpers. Views that allow … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-65cv-r6x7-79hv
Aliases: CVE-2020-5267 |
Cross site scripting vulnerability in ActionView There is a possible cross site scripting (XSS) vulnerability in ActionView's JavaScript literal escape … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-xq5j-gw7f-jgj8
Aliases: CVE-2020-8167 |
CSRF Vulnerability in rails-ujs There is a vulnerability in rails-ujs that allows attackers to send CSRF tokens to wrong domains. … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-86g5-2wh3-gc9j
Aliases: CVE-2019-5418 |
Path Traversal in Action View # File Content Disclosure in Action View Impact ------ There is a possible file content … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-m63j-wh5w-c252
Aliases: CVE-2019-5419 |
# Denial of Service Vulnerability in Action View Impact ------ Specially crafted accept headers can cause the Action View template … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-ch3h-j2vf-95pv
Aliases: CVE-2022-27777 GMS-2022-1138 |
XSS Vulnerability in Action View tag helpers There is a possible XSS vulnerability in Action View tag helpers. Passing untrusted … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |