Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/activesupport@8.1.0-beta.1
purl pkg:gem/activesupport@8.1.0-beta.1
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2026-33170
Aliases:
GHSA-89vf-4333-qx8v
Rails Active Support has a possible XSS vulnerability in SafeBuffer#% `SafeBuffer#%` does not propagate the `@html_unsafe` flag to the newly …
7.2.3.1
Vulnerable
8.0.4.1
Vulnerable
8.1.2.1
Vulnerable
7.2.3.1
Vulnerable
8.0.4.1
Vulnerable
8.1.2.1
Vulnerable
CVE-2026-33176
Aliases:
GHSA-2j26-frm8-cmj9
Rails Active Support has a possible DoS vulnerability in its number helpers Active Support number helpers accept strings containing scientific …
7.2.3.1
Vulnerable
8.0.4.1
Vulnerable
8.1.2.1
Vulnerable
7.2.3.1
Vulnerable
8.0.4.1
Vulnerable
8.1.2.1
Vulnerable
CVE-2026-33169
Aliases:
GHSA-cg4j-q9v8-6v38
Rails Active Support has a possible ReDoS vulnerability in number_to_delimited `NumberToDelimitedConverter` used a regular expression with `gsub!` to insert thousands …
7.2.3.1
Vulnerable
8.0.4.1
Vulnerable
8.1.2.1
Vulnerable
7.2.3.1
Vulnerable
8.0.4.1
Vulnerable
8.1.2.1
Vulnerable
This package is not known to fix any advisories.