Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

rubygems actionpack Security Advisories

Loading...
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg4NzctcHJxNC05eGZ3
Open Redirect in actionpack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ4amotNXg2aC04dm1m
Cross-site Scripting in actionpack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI5Z3ItdzU3Zi1ycGZ3
actionpack vulnerable to Path Traversal
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY5OW0tbWNqbS05Y3c4
actionpack vulnerable to Cross-site Scripting
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc4cmMtOGMyOS1wNDVn
actionpack allows remote code execution via application's unrestricted use of render method
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk4bWYtOGY1Ny02NHFm
actionpack Cross-site Scripting vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZjcWYtaDRoNC02OTVt
actionpack CRLF injection vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE3NTktaHd2Yy1tM2pn
actionpack Cross-site Scripting vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1weGYtZ2N3Mi1wdzVx
actionpack Improper Input Validation vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM2cXItaDV2cS01OWpj
Untrusted users can run pending migrations in production in Rails
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: almost 3 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdwdzctd3hqbS1jdzhy
actionpack allows bypass of database-query restrictions
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Low
GSA_kwCzR0hTQS05Y2hyLTRmamgtNXJnd84AAvjh
Cross-site Scripting in actionpack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: 7 months ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI3cTItNWdxZy02Yzdx
actionpack Improper Input Validation vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
High
GSA_kwCzR0hTQS13aDk4LXAyOHItdnJjOc0rDg
Exposure of information in Action Pack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 1 year ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ3ZmctcWozci02djNy
Moderate severity vulnerability that affects actionpack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 4 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU0NGotNzd4OS1oOTM4
Moderate severity vulnerability that affects actionpack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 4 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh4NDYtdndteC13eDk1
High severity vulnerability that affects actionpack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: almost 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTloNmctZ3A5NS14M3E1
actionpack is vulnerable to denial of service because of a wildcard controller route
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZmcHYtYzRobS0zeDZ2
actionpack is vulnerable to denial of service via a crafted HTTP Accept header
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEzNGMtNDhnYy1tOWc4
actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhqZzQtOHE1Zi14NmZt
Information Disclosure / Unintended Method Execution in Action Pack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: about 2 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc4d3ctNDZ4Mi0ycDY1
Denial of Service in Action Dispatch
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS05NDQ1LTRjcjYtMzM2cs4AAxDx
Open Redirect Vulnerability in Action Pack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM1bW0tY2M2ci04Zmpw
Cross-site scripting in actionpack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1xNThqLWZtdmYtOXJxNs0_jg
Cross site scripting in actionpack Rubygem
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: about 1 year ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThmcXgtN3B2NC0zandt
Improper Input Validation in actionpack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg1Nm0tdnd4Yy0zcXB3
Directory traversal vulnerability in actionpack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXh4cjgtODMzdi1jN3dj
Cross-site Scripting vulnerability in i18n translations helper method
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg3MjctbTZnai1tYzM3
Possible Strong Parameters Bypass in ActionPack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: about 3 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpwNXYtNWd4NC1qbWo5
Ability to forge per-form CSRF tokens in Rails
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: about 3 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFmNXgtcWd4Ny00Mzdo
Moderate severity vulnerability that affects actionpack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 4 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTIzdjMtcWZyai13bWdo
Moderate severity vulnerability that affects actionpack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 4 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZnOXctZzZtNC01NTdq
actionpack and activesupport vulnerable to information leaks
Ecosystems: rubygems
Packages: activesupport, actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1dzYtcDZtZy12aDhq
Rails actionpack gem vulnerable to Cross-site Scripting
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY1amctNTU4ai1xNjdj
actionpack Cross-site Scripting vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdnNjUtZ2hyZy1ocGY1
actionpack Cross-site Scripting vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTkydzktMnBxdy1yaGpq
actionpack Improper Authentication vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Low
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA2OTItN21tMy0zZnhn
actionpack is vulnerable to remote bypass authentication
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4MzgtdmZwcS1mbWYy
actionpack Cross-site Scripting vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczN2MtcTY1My1xZzk1
actionpack Cross-site Scripting vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdjZ3AtYzNnNy1xdnJ3
actionpack Improper Input Validation vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
GSA_kwCzR0hTQS1tbTMzLTV2ZnEtM21tM81BUA
Cross-site Scripting Vulnerability in Action Pack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: about 1 year ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3dzMtM3J4ai04djZx
actionpack allows remote attackers to bypass intended access restrictions
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Low
GSA_kwCzR0hTQS04eHd3LXgzZzMtNmpjds4AAxDv
ReDoS based DoS vulnerability in Action Dispatch
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: 5 months ago
Low
GSA_kwCzR0hTQS1wODR2LTQ1eGotd3dxas4AAxDz
ReDoS based DoS vulnerability in Action Dispatch
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV4bWotd205Ni1mbXc4
Moderate severity vulnerability that affects actionpack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 4 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI0ZmctcDk2di1oeGg4
actionpack Cross-Site Request Forgery vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTN2ZnctN3JjcC0zeGdt
actionpack Improper Input Validation vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZoNXEtOTZocC05amdt
actionpack vulnerable to Cross-site Scripting
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW01M2YtcmhxOC1xNmhm
Moderate severity vulnerability that affects actionpack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 4 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTd3angtM2c3ai04NTg0
Denial of Service in Action Controller Token Authentication
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: about 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ4ODUtajVqMi0yN2p4
actionpack Path Traversal vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVocTIteGY4OS05anhx
Open Redirect in Action Pack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: about 2 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptZ3ctNnZqZy1qandn
actionpack Improper Input Validation vulnerability
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhncHAtcHA4OS00Zmdm
Action Pack contains database-query restrictions bypass
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJycXctdjI2NS1qZjhj
Open Redirect in ActionPack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS1xcGhjLWhmNXEtdjhmY80bRw
Open Redirect in actionpack
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Published: over 1 year ago
Filter by Package
actionpack 57 nokogiri 28 rubygems-update 25 activerecord 24 rack 20 puppet 13 publify_core 13 rails-html-sanitizer 12 rails 12 actionview 12 activesupport 12 fat_free_crm 11 passenger 9 puma 9 org.jruby:jruby-stdlib 7 loofah 6 camaleon_cms 6 ember-source 6 doorkeeper 6 katello 5 spree 5 spree_auth_devise 5 bundler 4 safemode 4 devise 4 mail 4 commonmarker 4 rubyzip 4 sinatra 4 dragonfly 4 cgi 3 geminabox 3 private_address_check 3 rails_admin 3 fluentd 3 gollum 3 rest-client 3 bootstrap 3 sanitize 3 paperclip 3 ruby-saml 3 sidekiq 3 git 3 chartkick 3 omniauth 3 sprockets 3 activestorage 3 jquery-rails 3 httparty 2 red-arrow 2 administrate 2 kramdown 2 redcarpet 2 carrierwave 2 pageflow 2 qiita-markdown 2 activemodel 2 pyarrow 2 facter 2 json-jwt 2 avo 2 git-fastclone 2 ox 2 espeak-ruby 2 colorscore 2 web-console 2 bootstrap 2 jQuery 2 jquery 2 ruby-openid 2 bootstrap-sass 2 field_test 2 festivaltts4r 2 mechanize 2 metasploit-framework 2 radiant 2 rdoc 2 secure_headers 2 faye 2 yajl-ruby 2 user_agent_parser 2 bson 2 minitar 2 rack-cors 2 pdfkit 2 rack-mini-profiler 2 archive-tar-minitar 2 net-ldap 2 yard 2 mini_magick 2 i18n 2 json 2 VladTheEnterprising 2 omniauth-facebook 2 google-protobuf 2 sup 2 mapbox-rails 2 mapbox.js 2 webrick 2 pghero 2 com.google.protobuf:protobuf-java 2 com.google.protobuf:protobuf-kotlin 2 devise-two-factor 2 cocoapods-downloader 2 solidus_core 2 solidus_frontend 2 rubocop 1 airbrake-ruby 1 geocoder 1 uap-core 1 personnummer 1 activeresource 1 gemirro 1 solidus_backend 1 diffy 1 active-support 1 org.jruby:jruby-parent 1 sorcery 1 websocket-extensions 1 shrine 1 dependabot-omnibus 1 dependabot-common 1 spree_api 1 omniauth-apple 1 pgsync 1 faye-websocket 1 devise_token_auth 1 spina 1 gollum-lib 1 fileutils 1 em-imap 1 pdf_info 1 elastic-apm 1 thin 1 multi_xml 1 sqlite3-ruby 1 fog-dragonfly 1 newrelic_rpm 1 goliath 1 narou 1 railties 1 netaddr 1 rexml 1 paratrooper-newrelic 1 restforce 1 kcapifony 1 lynx 1 show_in_browser 1 update_by_case 1 ciborg 1 clearance 1 cap-strap 1 lawn-login 1 sensu 1 openshift-origin-node 1 simple_form 1 ruby-jss 1 date 1 matestack-ui-core 1 sfpagent 1 kaminari 1 solidus_api 1 omniauth-auth0 1 haml 1 brbackup 1 trestle-auth 1 better_errors 1 rails_multisite 1 redis-store 1 bibtex-ruby 1 twitter-bootstrap-rails 1 ffi 1 samlr 1 message_bus 1 padrino-contrib 1 marginalia 1 image_processing 1 datagrid 1 omniauth-saml 1 view_component 1 slanger 1 gibbon 1 random_password_generator 1 trilogy 1 pysha3 1 sha3 1 apollo_upload_server 1 blazer 1 kitchen-terraform 1 rack-ssl 1 pay 1 command_wrap 1 webbynode 1 nori 1 crack 1 rwiki 1 paranoid2 1 bootstrap-sass 1 audited 1 inline_svg 1 active_attr 1 asciidoctor-include-ext 1 oxidized-web 1 recurly 1 tmpdir 1 csv-safe 1 octopoller 1 mixlib-archive 1 smalruby-editor 1 smalruby 1 kafo 1 jmespath 1 chloride 1 features 1 omniauth-weibo-oauth2 1 point-cli 1 http 1 xapian-core 1 hammer_cli_foreman 1 smashing 1 ccsv 1 cairo 1 sentry-raven 1 ldap_fluff 1 xaviershay-dm-rails 1 authlogic 1 kajam 1 iodine 1 rexical 1 flash_tool 1 karteek-docsplit 1 lean-ruport 1 rbovirt 1 gtk2 1 tweetstream 1 gon 1 RedCloth 1 bootstrap 1 bootstrap.sass 1 text_helpers 1 arabic-prawn 1 delayed_job_web 1 chartkick 1 redcloth 1 many_versioned_gem 1 rack-cache 1 consul 1 ruby_parser-legacy 1 activejob 1 curupira 1 rack-protection 1 asciidoctor 1 rake 1 Bootstrap.Less 1 gyazo 1 easymon 1 activerecord-session_store 1 foreman_fog_proxmox 1 com.google.protobuf:protobuf-javalite 1 bindata 1 papercrop 1 oauth 1 devise_masquerade 1 cremefraiche 1 ldoce 1 cocaine 1 kelredd-pruview 1 keynote 1 jruby-openssl 1 jquery-ui 1 octokit 1 extlib 1 will_paginate 1 com.google.protobuf:protobuf-kotlin-lite 1 jekyll 1 jquery-ujs 1 reel 1 aescrypt 1 curl 1 actionmailer 1 actionpack-page_caching 1 cron_parser 1 coin_base 1 blockchain_wallet 1 awesome-bot 1 doge-coin 1 capistrano-colors 1 bitcoin_vanity 1 coming-soon 1 rgpg 1 foreman_ansible 1 time 1 govuk_tech_docs 1 sisimai 1 md2pdf 1 smart_proxy_dynflow 1 mcollective-client 1 backup_checksum 1 backup-agoddard 1 excon 1