Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/rails@7.1.3
purl pkg:gem/rails@7.1.3
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.8
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2006-4112
Aliases:
GHSA-9wrq-xvmp-xjc8
High severity vulnerability that affects rails. Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 … There are no reported fixed by versions.
CVE-2006-4111
Aliases:
GHSA-rvpq-5xqx-pfpp
High severity vulnerability that affects rails Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" … There are no reported fixed by versions.
GHSA-9822-6m93-xqf4
Aliases:
CVE-2024-26143
Rails has possible XSS Vulnerability in Action Controller # Possible XSS Vulnerability in Action Controller There is a possible XSS …
7.1.3.1
Vulnerable
CVE-2024-26142
Aliases:
GHSA-jjhx-jhvp-74wq
Rails has possible ReDoS vulnerability in Accept header parsing in Action Dispatch # Possible ReDoS vulnerability in Accept header parsing …
7.1.3.1
Vulnerable
7.1.3.1
Vulnerable
This package is not known to fix any advisories.