Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/activesupport@2.3.0
purl pkg:gem/activesupport@2.3.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-fg9w-g6m4-557j
Aliases:
CVE-2009-3086
actionpack and activesupport vulnerable to information leaks A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before …
2.3.4
Vulnerable
GHSA-8qrh-h9m2-5fvf
Aliases:
CVE-2009-3009
Cross site scripting that affects rails Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before …
2.3.4
Vulnerable
CVE-2009-3086
Aliases:
GHSA-fg9w-g6m4-557j
Exposure of Sensitive Information to an Unauthorized Actor A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x …
2.3.4
Vulnerable
2.3.4
Vulnerable
This package is not known to fix any advisories.