Browse Security Advisories
Moderate Security Advisories for https://github.com/rails/rails from github Clear Filters
Moderate
11 months ago
Active Record logging vulnerable to ANSI escape injection
rubygems
activerecord
Moderate
almost 2 years ago
Possible ReDoS vulnerability in block_format in Action Mailer
rubygems
actionmailer
Moderate
almost 2 years ago
Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action Text
rubygems
actiontext
Moderate
almost 2 years ago
Possible ReDoS vulnerability in HTTP Token authentication in Action Controller
rubygems
actionpack
Moderate
almost 2 years ago
Possible ReDoS vulnerability in query parameter filtering in Action Dispatch
rubygems
actionpack
Moderate
about 2 years ago
Missing security headers in Action Pack on non-HTML responses
rubygems
actionpack
Moderate
about 2 years ago
ActionText ContentAttachment can Contain Unsanitized HTML
rubygems
actiontext
Moderate
over 2 years ago
Rails has possible Sensitive Session Information Leak in Active Storage
rubygems
activestorage
Moderate
over 2 years ago
Rails has possible XSS Vulnerability in Action Controller
rubygems
actionpack
Moderate
almost 3 years ago
Active Support Possibly Discloses Locally Encrypted Files
rubygems
activesupport
Moderate
about 3 years ago
Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to
rubygems
actionpack
Moderate
about 3 years ago
rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements
rubygems
actionview
Moderate
over 3 years ago
Possible XSS Security Vulnerability in SafeBuffer#bytesplice
rubygems
activesupport
Moderate
over 4 years ago
actionpack Open Redirect in Host Authorization Middleware
rubygems
actionpack
Moderate
about 6 years ago
Untrusted users can run pending migrations in production in Rails
rubygems
actionpack
Moderate
over 8 years ago
rails Cross-site Scripting vulnerability
rubygems
activesupport, actionpack
Moderate
over 8 years ago
Cross-site Scripting vulnerability in i18n translations helper method
rubygems
actionpack
Moderate
over 8 years ago
Rails activerecord gem has Improper Input Validation vulnerability
rubygems
activerecord
Moderate
over 8 years ago
actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request
rubygems
actionpack
Moderate
over 8 years ago
Rails actionpack gem vulnerable to Cross-site Scripting
rubygems
actionpack
Moderate
over 8 years ago
actionpack and activesupport vulnerable to information leaks
rubygems
activesupport, actionpack
Moderate
over 8 years ago
Action Pack contains database-query restrictions bypass
rubygems
actionpack
Moderate
over 8 years ago
activesupport vulnerable to Denial of Service via large XML document depth
rubygems
activesupport
Filter by Severity
Filter by Source
Filter by Ecosystem
packagist
3,680
maven
3,676
pypi
2,697
npm
2,475
go
2,200
nuget
1,955
cargo
608
rubygems
494
hex
33
swift
21
actions
16
pub
3
Filter by Package
moodle/moodle
317
openclaw
300
tensorflow
200
magento/community-edition
193
tensorflow-cpu
190
tensorflow-gpu
187
org.jenkins-ci.main:jenkins-core
152
github.com/mattermost/mattermost/server/v8
128
typo3/cms
124
github.com/mattermost/mattermost-server
115
com.liferay.portal:release.portal.bom
113
org.apache.tomcat:tomcat
100
pimcore/pimcore
91
Magick.NET-Q16-AnyCPU
86
Magick.NET-Q16-HDRI-AnyCPU
86
Magick.NET-Q16-HDRI-OpenMP-arm64
81
Magick.NET-Q16-HDRI-x86
81
com.liferay.portal:release.dxp.bom
80
Magick.NET-Q16-HDRI-x64
80
Magick.NET-Q16-HDRI-arm64
79
Magick.NET-Q16-OpenMP-x64
78
Magick.NET-Q16-OpenMP-arm64
78
Magick.NET-Q16-x86
78
Magick.NET-Q16-arm64
77
typo3/cms-core
77
Magick.NET-Q8-AnyCPU
76
Magick.NET-Q8-OpenMP-arm64
74
Magick.NET-Q8-OpenMP-x64
73
Magick.NET-Q16-x64
73
Magick.NET-Q8-arm64
73
wwbn/avideo
73
Magick.NET-Q8-x86
73
microweber/microweber
72
apache-airflow
69
Magick.NET-Q8-x64
68
silverstripe/framework
66
concrete5/concrete5
65
thorsten/phpmyfaq
64
n8n
62
craftcms/cms
59
magento/project-community-edition
58
phpmyadmin/phpmyadmin
56
dolibarr/dolibarr
56
Magick.NET-Q16-HDRI-OpenMP-x64
55
drupal/core
54
github.com/usememos/memos
54
librenms/librenms
53
org.keycloak:keycloak-services
51
symfony/symfony
49
mantisbt/mantisbt
49
apache-superset
47
open-webui
46
Django
44
code.gitea.io/gitea
44
actionpack
44
Magick.NET-Q16-OpenMP-x86
43
nocodb
41
parse-server
40
snipe/snipe-it
39
drupal/drupal
39
github.com/grafana/grafana
36
org.elasticsearch:elasticsearch
35
showdoc/showdoc
35
shopware/platform
34
directus
34
admidio/admidio
33
picklescan
33
hono
33
org.keycloak:keycloak-core
32
surrealdb
32
pypdf
32
getgrav/grav
30
nova
30
shopware/core
30
github.com/mattermost/mattermost-server/v6
29
mautic/core
29
baserproject/basercms
29
plone
29
vllm
28
getkirby/cms
28
intelliants/subrion
28
next
28
ansible
27
moin
27
gogs.io/gogs
26
rack
26
k8s.io/kubernetes
25
Plone
24
aiohttp
24
froxlor/froxlor
24
github.com/cilium/cilium
23
axios
23
phpmyfaq/phpmyfaq
23
github.com/hashicorp/vault
22
grumpydictator/firefly-iii
22
DotNetNuke.Core
21
code.vikunja.io/api
21
github.com/answerdev/answer
21
nilsteampassnet/teampass
21
github.com/openfga/openfga
21
matrix-synapse
21
gradio
21
github.com/traefik/traefik/v2
21
flowise
21
wasmtime
21
github.com/traefik/traefik/v3
21
shopware/shopware
20
django
20
kimai/kimai
20
mediawiki/core
20
pyload-ng
20
org.apache.tomcat.embed:tomcat-embed-core
19
electron
19
org.apache.struts:struts2-core
19
statamic/cms
19
github.com/docker/docker
18
contao/core-bundle
18
dompurify
18
github.com/fleetdm/fleet/v4
18
remdex/livehelperchat
18
keystone
17
github.com/hashicorp/consul
17
org.opencms:opencms-core
17
prestashop/prestashop
17
github.com/argoproj/argo-cd/v2
17
nokogiri
17
salt
17
typo3/cms-backend
16
io.undertow:undertow-core
16
sylius/sylius
16
github.com/siyuan-note/siyuan/kernel
16
github.com/hashicorp/nomad
16
rdiffweb
16
glance
15
org.apache.jspwiki:jspwiki-main
15
yetiforce/yetiforce-crm
15
io.netty:netty-codec-http
15
weblate
15
zendframework/zendframework1
15
vyper
15
org.springframework.security:spring-security-core
15
org.xwiki.platform:xwiki-platform-oldcore
15
tinymce
14
astro
14
wagtail
14
feehi/cms
14
com.liferay.portal:com.liferay.portal.impl
14
github.com/filebrowser/filebrowser/v2
14
activesupport
14
github.com/goharbor/harbor
14
pnpm
14
deno
14
puppet
14
feehi/feehicms
14
svelte
13
ghost
13
github.com/containerd/containerd
13
com.jfinal:jfinal
13
Umbraco.Cms
13
github.com/ethereum/go-ethereum
13
github.com/zitadel/zitadel
13
mistune
13
tribalsystems/zenario
13
forkcms/forkcms
13
craftcms/commerce
13
coreutils
13
vite
13
helm.sh/helm/v3
13
transformers
13
com.thoughtworks.xstream:xstream
13
org.eclipse.jetty:jetty-server
13
github.com/openbao/openbao
12
@openzeppelin/contracts-upgradeable
12
wallabag/wallabag
12
lavalite/cms
12
github.com/rancher/rancher
12
github.com/traefik/traefik
12
undici
12
simplesamlphp/simplesamlphp
12
@openzeppelin/contracts
12
phpoffice/phpspreadsheet
12
mlflow
12
OctoPrint
12
facturascripts/facturascripts
12
roundup
12
ec-cube/ec-cube
12
cakephp/cakephp
11
ckeditor4
11
kubevirt.io/kubevirt
11
github.com/argoproj/argo-cd
11
renovate
11
org.bouncycastle:bcprov-jdk15on
11
laravel/framework
11
org.keycloak:keycloak-parent
11
zebrad
11
horizon
11
tinymce/tinymce
11
ckan
11
genix/cms
11
github.com/coder/coder/v2
11
Filter by Repository
https://github.com/tensorflow/tensorflow
200
https://github.com/moodle/moodle
192
https://github.com/liferay/liferay-portal
143
https://github.com/jenkinsci/jenkins
109
https://github.com/pimcore/pimcore
85
https://github.com/microweber/microweber
63
https://github.com/TYPO3/typo3
63
https://github.com/apache/tomcat
60
https://github.com/django/django
50
https://github.com/xwiki/xwiki-platform
50
https://github.com/silverstripe/silverstripe-framework
50
https://github.com/usememos/memos
50
https://github.com/rails/rails
46
https://github.com/thorsten/phpmyfaq
45
https://github.com/keycloak/keycloak
45
https://github.com/apache/airflow
44
https://github.com/librenms/librenms
42
https://github.com/kubernetes/kubernetes
40
https://github.com/mattermost/mattermost
36
https://github.com/mantisbt/mantisbt
35
https://github.com/star7th/showdoc
32
https://github.com/mmaitre314/picklescan
30
https://github.com/concretecms/concretecms
28
https://github.com/symfony/symfony
27
https://github.com/grafana/grafana
27
https://github.com/mautic/mautic
27
https://github.com/phpmyadmin/phpmyadmin
26
https://github.com/spring-projects/spring-framework
26
https://github.com/craftcms/cms
26
https://github.com/ansible/ansible
26
https://github.com/shopware/shopware
24
https://github.com/argoproj/argo-cd
24
https://github.com/directus/directus
24
https://github.com/umbraco/Umbraco-CMS
23
https://github.com/Dolibarr/dolibarr
22
https://github.com/answerdev/answer
21
https://github.com/apache/activemq
20
https://github.com/magento/magento2
20
https://github.com/firefly-iii/firefly-iii
20
https://github.com/plone/Products.CMFPlone
20
https://github.com/snipe/snipe-it
20
https://github.com/cilium/cilium
19
https://github.com/contao/contao
18
https://github.com/openstack/nova
18
https://github.com/livehelperchat/livehelperchat
18
https://github.com/apache/struts
17
https://github.com/shopware/platform
16
https://github.com/gradio-app/gradio
16
https://github.com/matrix-org/synapse
16
https://github.com/ikus060/rdiffweb
16
https://github.com/CVEProject/cvelist
15
https://github.com/netty/netty
15
https://github.com/apache/cxf
15
https://github.com/getkirby/kirby
15
https://github.com/vyperlang/vyper
15
https://github.com/froxlor/froxlor
14
https://github.com/x-stream/xstream
14
https://github.com/PaddlePaddle/Paddle
14
https://github.com/TYPO3/TYPO3.CMS
14
https://github.com/baserproject/basercms
14
https://github.com/yetiforcecompany/yetiforcecrm
14
https://github.com/moby/moby
14
https://github.com/OpenNMS/opennms
14
https://github.com/saltstack/salt
14
https://github.com/geoserver/geoserver
14
https://github.com/tinymce/tinymce
14
https://github.com/goharbor/harbor
13
https://github.com/bcgit/bc-java
13
https://github.com/strapi/strapi
13
https://github.com/containerd/containerd
13
https://github.com/nilsteampassnet/TeamPass
13
https://github.com/rack/rack
13
https://github.com/apache/nifi
13
https://github.com/PrestaShop/PrestaShop
13
https://github.com/openfga/openfga
13
https://github.com/go-gitea/gitea
13
https://github.com/octobercms/october
13
https://github.com/OpenZeppelin/openzeppelin-contracts
12
https://github.com/openstack/keystone
12
https://github.com/TYPO3-CMS/core
12
https://github.com/helm/helm
12
https://github.com/hashicorp/consul
12
https://github.com/traefik/traefik
12
https://github.com/huggingface/transformers
12
https://github.com/vitejs/vite
11
https://github.com/apache/zeppelin
11
https://github.com/vaadin/platform
11
https://github.com/intelliants/subrion
11
https://github.com/ckeditor/ckeditor4
11
https://github.com/forkcms/forkcms
11
https://github.com/github/advisory-database
11
https://github.com/rancher/rancher
11
https://github.com/ethereum/go-ethereum
11
https://github.com/laravel/framework
11
https://github.com/dnnsoftware/Dnn.Platform
11
https://github.com/electron/electron
11
https://github.com/surrealdb/surrealdb
11
https://github.com/PHPOffice/PhpSpreadsheet
10
https://github.com/backstage/backstage
10
https://github.com/greenpau/caddy-security
10
https://github.com/wallabag/wallabag
10
https://github.com/aio-libs/aiohttp
10
https://github.com/TryGhost/Ghost
10
https://github.com/laurent22/joplin
10
https://github.com/vercel/next.js
10
https://github.com/simplesamlphp/simplesamlphp
10
https://github.com/vllm-project/vllm
10
https://github.com/decidim/decidim
10
https://github.com/liufee/cms
10
https://github.com/bytecodealliance/wasmtime
10
https://github.com/jquery/jquery
9
https://github.com/fatfreecrm/fat_free_crm
9
https://github.com/dotnet/runtime
9
https://github.com/jenkinsci/git-plugin
9
https://github.com/puppetlabs/puppet
9
https://github.com/dpgaspar/Flask-AppBuilder
9
https://github.com/opencast/opencast
9
https://github.com/pimcore/admin-ui-classic-bundle
9
https://github.com/urllib3/urllib3
9
https://github.com/publify/publify
9
https://github.com/OctoPrint/OctoPrint
9
https://github.com/sparklemotion/nokogiri
9
https://github.com/alkacon/opencms-core
9
https://github.com/thorsten/phpMyFAQ
9
https://github.com/modoboa/modoboa
8
https://github.com/pyload/pyload
8
https://github.com/parse-community/parse-server
8
https://github.com/dolibarr/dolibarr
8
https://github.com/rubygems/rubygems
8
https://github.com/hashicorp/nomad
8
https://github.com/nilsteampassnet/teampass
8
https://github.com/gogs/gogs
8
https://github.com/zendframework/zendframework
8
https://github.com/FlowiseAI/Flowise
8
https://github.com/openbao/openbao
8
https://github.com/sulu/sulu
8
https://github.com/opensearch-project/security
8
https://github.com/openstack/glance
8
https://github.com/LavaLite/cms
8
https://github.com/ckan/ckan
8
https://github.com/pandao/editor.md
8
https://github.com/getgrav/grav
8
https://github.com/swagger-api/swagger-ui
8
https://github.com/onionshare/onionshare
8
https://github.com/apache/superset
8
https://github.com/kubeedge/kubeedge
8
https://github.com/eclipse/jetty.project
8
https://github.com/rails/rails-html-sanitizer
8
https://github.com/hashicorp/vault
7
https://github.com/MobSF/Mobile-Security-Framework-MobSF
7
https://github.com/OPCFoundation/UA-.NETStandard
7
https://github.com/opencv/opencv
7
https://github.com/jenkinsci/blueocean-plugin
7
https://github.com/opencontainers/runc
7
https://github.com/twbs/bootstrap
7
https://github.com/denoland/deno
7
https://github.com/croogo/croogo
7
https://github.com/nocodb/nocodb
7
https://github.com/vaadin/flow
7
https://github.com/louislam/uptime-kuma
7
https://github.com/jupyter/notebook
7
https://github.com/nahsra/antisamy
7
https://github.com/janeczku/calibre-web
7
https://github.com/igniterealtime/Openfire
7
https://github.com/openstack/horizon
7
https://github.com/Sylius/Sylius
7
https://github.com/kevinpapst/kimai2
7
https://github.com/containers/podman
7
https://github.com/zenml-io/zenml
7
https://github.com/modxcms/revolution
7
https://github.com/Leantime/leantime
7
https://github.com/bagisto/bagisto
7
https://github.com/jeecgboot/jeecg-boot
7
https://github.com/py-pdf/pypdf
7
https://github.com/vega/vega
7
https://github.com/undertow-io/undertow
7
https://github.com/google/fscrypt
7
https://github.com/treeverse/lakeFS
7
https://github.com/n8n-io/n8n
7
https://github.com/zitadel/zitadel
7
https://github.com/kubevirt/kubevirt
7
https://github.com/scrapy/scrapy
7
https://github.com/chakra-core/ChakraCore
7
https://github.com/python-pillow/Pillow
7
https://github.com/matrix-org/matrix-rust-sdk
7
https://github.com/StarCitizenTools/mediawiki-skins-Citizen
7
https://github.com/dragonflyoss/dragonfly
7
https://github.com/1Panel-dev/1Panel
6
https://github.com/roundup-tracker/roundup
6
https://github.com/jenkinsci/fortify-on-demand-uploader-plugin
6
https://github.com/wagtail/wagtail
6
https://github.com/twisted/twisted
6
https://github.com/stacklok/minder
6
https://github.com/lxml/lxml
6
https://github.com/panva/jose
6
https://github.com/cri-o/cri-o
6
https://github.com/d4wner/Vulnerabilities-Report
6
https://github.com/puma/puma
6
https://github.com/jenkinsci/script-security-plugin
6