Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/rails@2.3.0
purl pkg:gem/rails@2.3.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2009-3086
Aliases:
GHSA-fg9w-g6m4-557j
Exposure of Sensitive Information to an Unauthorized Actor A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x …
2.2.3
Vulnerable
2.3.4
Vulnerable
GHSA-9p3v-wf2w-v29c
Aliases:
CVE-2009-4214
Moderate severity vulnerability that affects rails Cross-site scripting (XSS) vulnerability in the strip_tags function in Ruby on Rails before 2.2.s, …
2.3.5
Vulnerable
CVE-2009-3009
Aliases:
GHSA-8qrh-h9m2-5fvf
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before …
2.2.3
Vulnerable
2.3.4
Vulnerable
2.2.3
Vulnerable
2.3.4
Vulnerable
This package is not known to fix any advisories.