Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

rubygems activesupport Security Advisories

Browse all Security Advisories for rubygems activesupport

Loading...
Low
GSA_kwCzR0hTQS1jcjVxLTZxOWYtcnE2cc4AA1eP
Active Support Possibly Discloses Locally Encrypted Files
Ecosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1wajczLXY1bXctcG05as4AAyIp
Possible XSS Security Vulnerability in SafeBuffer#bytesplice
Ecosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
Low
GSA_kwCzR0hTQS1qNmdjLTc5Mm0tcWdtMs4AAxDy
ReDoS based DoS vulnerability in Active Support's underscore
Ecosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJwNjgtZjc0di05d2M2
ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore
Ecosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 60.1
Published: over 4 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZnOXctZzZtNC01NTdq
actionpack and activesupport vulnerable to information leaks
Ecosystems: rubygems
Packages: activesupport, actionpack
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 7 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThxcmgtaDltMi01ZnZm
Cross site scripting that affects rails
Ecosystems: rubygems
Packages: activesupport, actionpack
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 7 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlmaDMtdmgzaC1xNGcz
activesupport Cross-site Scripting vulnerability
Ecosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 7 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXF2OHAtdjlxdy13Yzdn
activesupport Cross-site Scripting vulnerability
Ecosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 7 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY5djQtN2pwNi04Yzcz
rails Cross-site Scripting vulnerability
Ecosystems: rubygems
Packages: activesupport, actionpack
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 7 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg4MzUtNzVody1wajg5
activesupport Cross-site Scripting vulnerability
Ecosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 7 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhncjItdjk0bS1yYzln
activesupport in Rails vulnerable to incorrect data conversion
Ecosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 7 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTljMmotNTkzcS0zZzgy
activesupport Improper Input Validation vulnerability
Ecosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 7 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo5NnIteHZqcS1yOXBn
activesupport vulnerable to Denial of Service via large XML document depth
Ecosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 7 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ4dnAtNHh3Yy1qcHA2
activesupport Cross-site Scripting vulnerability
Ecosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 7 years ago
Statistics
Advisories: 20,668
Packages: 9,040
Repositories: 2
Ecosystems: 12
Filter by Package
actionpack 60 nokogiri 43 rubygems-update 25 puppet 23 rack 23 activerecord 21 camaleon_cms 14 activesupport 14 publify_core 14 passenger 13 actionview 12 puma 12 rails 11 decidim 11 fat_free_crm 10 jquery-rails 9 rails-html-sanitizer 9 bootstrap 9 twbs/bootstrap 9 org.webjars:bootstrap 9 bootstrap 9 bootstrap 9 org.webjars.npm:jquery 8 jquery 8 bootstrap-sass 8 jquery-ui 7 org.webjars.npm:jquery-ui 7 jquery-ui-rails 7 bootstrap.sass 7 jQuery.UI.Combined 7 jQuery 7 rexml 7 org.jruby:jruby-stdlib 7 doorkeeper 6 ember-source 6 loofah 6 katello 6 webrick 5 sinatra 5 grpcio 5 grpc 5 bundler 5 spree 5 commonmarker 5 spree_auth_devise 5 sidekiq 5 bootstrap-sass 5 mail 4 carrierwave 4 avo 4 ruby-saml 4 dragonfly 4 fluentd 4 rails_admin 4 devise 4 sanitize 4 activestorage 4 decidim-admin 3 omniauth 3 geminabox 3 openssl 3 openc3 3 openc3 3 chartkick 3 cgi 3 yard 3 json-jwt 3 spina 3 activeadmin 3 decidim-core 3 rack-cors 3 actiontext 3 rubyzip 3 google-protobuf 3 io.grpc:grpc-protobuf 3 com.google.protobuf:protobuf-kotlin 3 com.google.protobuf:protobuf-java 3 devise-two-factor 3 gollum 3 resque 3 phlex 3 git 3 rest-client 3 private_address_check 3 rdoc 3 view_component 2 json 2 mini_magick 2 pghero 2 kaminari 2 radiant 2 logstash-core 2 red-arrow 2 pyarrow 2 actionmailer 2 redcarpet 2 bson 2 paperclip 2 secure_headers 2 net-ldap 2 maximebf/debugbar 2 decidim-meetings 2 solidus_core 2 omniauth-saml 2 com.google.protobuf:protobuf-kotlin-lite 2 uri 2 com.google.protobuf:protobuf-javalite 2 twitter-bootstrap-rails 2 echor 2 facter 2 @openc3/tool-common 2 field_test 2 administrate 2 httparty 2 sup 2 VladTheEnterprising 2 pageflow 2 sprockets 2 ruby-openid 2 cocoapods-downloader 2 omniauth-facebook 2 i18n 2 safemode 2 mapbox-rails 2 ox 2 git-fastclone 2 mapbox.js 2 faye 2 org.webjars.npm:bootstrap 2 mechanize 2 pdfkit 2 kramdown 2 solidus_frontend 2 yajl-ruby 2 user_agent_parser 2 qiita-markdown 2 sidekiq-unique-jobs 2 decidim-templates 2 smalruby-editor 1 unpoly-rails 1 smalruby 1 jquery 1 mongrel 1 net.sf.mpxj:mpxj 1 awesome_spawn 1 mpxj 1 mpxj 1 oxidized-web 1 discordrb 1 turbo_boost-commands 1 diffy 1 recurly 1 @turbo-boost/commands 1 md2pdf 1 sounder 1 date 1 rotp 1 gtk2 1 octopoller 1 pwpush 1 ruby-mysql 1 paratrooper-newrelic 1 rubocop 1 jmespath 1 trilogy 1 sentry-raven 1 bindata 1 decidim-decidim_awesome 1 ruby_parser 1 better_errors 1 chartkick 1 rails_multisite 1 Autolab 1 open-uri-cached 1 kredis 1 RedCloth 1 kitchen-terraform 1 apollo_upload_server 1 sisimai 1 exiftool_vendored 1 globalid 1 uglify-js 1 uglifier 1 paratrooper-pingdom 1 sfpagent 1 ldoce 1 omniauth-oauth2 1 gollum-lib 1 mysql-binuuid-rails 1 marginalia 1 simple_captcha2 1 simple_form 1 haml 1 ruby_parser-legacy 1 bootstrap-wysihtml5-rails 1 handlebars 1 bibtex-ruby 1 uap-core 1 rake 1 random_password_generator 1