Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/rails@7.1.3.1
purl pkg:gem/rails@7.1.3.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2006-4112
Aliases:
GHSA-9wrq-xvmp-xjc8
High severity vulnerability that affects rails. Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 … There are no reported fixed by versions.
CVE-2006-4111
Aliases:
GHSA-rvpq-5xqx-pfpp
High severity vulnerability that affects rails Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" … There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-9822-6m93-xqf4
Rails has possible XSS Vulnerability in Action Controller # Possible XSS Vulnerability in Action Controller There is a possible XSS … CVE-2024-26143
CVE-2024-26142
Rails has possible ReDoS vulnerability in Accept header parsing in Action Dispatch # Possible ReDoS vulnerability in Accept header parsing … GHSA-jjhx-jhvp-74wq