Search for packages
| purl | pkg:gem/activesupport@2.3.7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2013-0333
|
Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 There is a vulnerability in the JSON code for … |
Vulnerable Vulnerable |
|
CVE-2009-3086
Aliases: GHSA-fg9w-g6m4-557j |
actionpack and activesupport vulnerable to information leaks A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before … | There are no reported fixed by versions. |
|
CVE-2009-3009
Aliases: GHSA-8qrh-h9m2-5fvf OSV-57666 |
Moderate severity XSS vulnerability that affects rails Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x … | There are no reported fixed by versions. |
|
GHSA-89vf-4333-qx8v
Aliases: CVE-2026-33170 |
Rails Active Support has a possible XSS vulnerability in SafeBuffer#% ### Impact `SafeBuffer#%` does not propagate the `@html_unsafe` flag to … |
Vulnerable |
|
GHSA-2j26-frm8-cmj9
Aliases: CVE-2026-33176 |
Rails Active Support has a possible DoS vulnerability in its number helpers ### Impact Active Support number helpers accept strings … |
Vulnerable |
|
GHSA-cg4j-q9v8-6v38
Aliases: CVE-2026-33169 |
Rails Active Support has a possible ReDoS vulnerability in number_to_delimited ### Impact `NumberToDelimitedConverter` used a regular expression with `gsub!` to … |
Vulnerable |
|
GHSA-j96r-xvjq-r9pg
Aliases: CVE-2015-3227 |
activesupport vulnerable to Denial of Service via large XML document depth The (1) `jdom.rb` and (2) `rexml.rb` components in Active … |
Vulnerable |
|
GHSA-9fh3-vh3h-q4g3
Aliases: CVE-2011-2932 |
activesupport Cross-site Scripting vulnerability Cross-site scripting (XSS) vulnerability in `activesupport/lib/active_support/core_ext/string/output_safety.r`b in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, … | There are no reported fixed by versions. |
|
GHSA-h835-75hw-pj89
Aliases: CVE-2012-3464 |
activesupport Cross-site Scripting vulnerability Cross-site scripting (XSS) vulnerability in `activesupport/lib/active_support/core_ext/string/output_safety.rb` in Ruby on Rails before 2.3.16, 3.0.x before , 3.1.x … |
Vulnerable |
|
GHSA-xgr2-v94m-rc9g
Aliases: CVE-2013-0333 |
activesupport in Rails vulnerable to incorrect data conversion `lib/active_support/json/backends/yaml.rb` in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 … |
Vulnerable |
|
GHSA-j6gc-792m-qgm2
Aliases: CVE-2023-22796 |
ReDoS based DoS vulnerability in Active Support's underscore There is a possible regular expression based DoS vulnerability in Active Support. … |
Vulnerable |
|
GHSA-pj73-v5mw-pm9j
Aliases: CVE-2023-28120 GMS-2023-765 |
Possible XSS Security Vulnerability in SafeBuffer#bytesplice There is a vulnerability in ActiveSupport if the new bytesplice method is called on … |
Vulnerable |
|
CVE-2026-33170
Aliases: GHSA-89vf-4333-qx8v |
Rails Active Support has a possible XSS vulnerability in SafeBuffer#% `SafeBuffer#%` does not propagate the `@html_unsafe` flag to the newly … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2026-33176
Aliases: GHSA-2j26-frm8-cmj9 |
Rails Active Support has a possible DoS vulnerability in its number helpers Active Support number helpers accept strings containing scientific … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2026-33169
Aliases: GHSA-cg4j-q9v8-6v38 |
Rails Active Support has a possible ReDoS vulnerability in number_to_delimited `NumberToDelimitedConverter` used a regular expression with `gsub!` to insert thousands … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2011-2197
Aliases: GHSA-v9v4-7jp6-8c73 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') The cross-site scripting (XSS) prevention feature in Ruby on Rails … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-v9v4-7jp6-8c73
Aliases: CVE-2011-2197 |
rails Cross-site Scripting vulnerability The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, … |
Vulnerable Vulnerable Vulnerable |