Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/rails@7.0.7.2
purl pkg:gem/rails@7.0.7.2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.8
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2006-4112
Aliases:
GHSA-9wrq-xvmp-xjc8
High severity vulnerability that affects rails. Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 … There are no reported fixed by versions.
CVE-2006-4111
Aliases:
GHSA-rvpq-5xqx-pfpp
High severity vulnerability that affects rails Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" … There are no reported fixed by versions.
GHSA-9822-6m93-xqf4
Aliases:
CVE-2024-26143
Rails has possible XSS Vulnerability in Action Controller # Possible XSS Vulnerability in Action Controller There is a possible XSS …
7.0.8.1
Vulnerable
CVE-2024-26144
Aliases:
GHSA-8h22-8cf7-hq6g
Rails has possible Sensitive Session Information Leak in Active Storage # Possible Sensitive Session Information Leak in Active Storage There …
7.0.8.1
Vulnerable
6.1.7.7
Vulnerable
7.0.8.1
Vulnerable
6.1.7.7
Vulnerable
This package is not known to fix any advisories.