Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

rubygems

actionmailer

rubygems

Email on Rails. Compose, deliver, and test emails using the familiar controller/view pattern. First-class support for multipart email and attachments.

View on github.com · View on rubygems.org

Security Advisories for actionmailer in rubygems

Potential
Critical
about 1 year ago

Active Storage allowed transformation methods that were potentially unsafe GSA_kwCzR0hTQS1yNG1nLTQ0MzMtYzdnM84ABLDC

rubygems activestorage
Potential
Moderate
about 1 year ago

Active Record logging vulnerable to ANSI escape injection GSA_kwCzR0hTQS03NnI3LWhoeGotcjc3Ns4ABLC9

rubygems activerecord
Potential
Low
almost 2 years ago

Possible Content Security Policy bypass in Action Dispatch GSA_kwCzR0hTQS12Zm01LXJtcmgtajI2ds4ABCQK

rubygems actionpack
Moderate
about 2 years ago

Possible ReDoS vulnerability in block_format in Action Mailer GSA_kwCzR0hTQS1oNDdoLW13cDktYzZxNs4ABATf

rubygems actionmailer
Potential
Moderate
about 2 years ago

Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action Text GSA_kwCzR0hTQS13d2h2LXd4djktcnBnd84ABATc

rubygems actiontext
Potential
Moderate
about 2 years ago

Possible ReDoS vulnerability in HTTP Token authentication in Action Controller GSA_kwCzR0hTQS12Zmc5LXIzZnEtanZ4NM4ABATd

rubygems actionpack
Potential
Moderate
about 2 years ago

Possible ReDoS vulnerability in query parameter filtering in Action Dispatch GSA_kwCzR0hTQS14NzZ3LTZ2anItOHhnas4ABATe

rubygems actionpack
Potential
Moderate
over 2 years ago

Missing security headers in Action Pack on non-HTML responses GSA_kwCzR0hTQS1md2hyLTg4cXgtaDlnN84AA8tD

rubygems actionpack
Potential
Moderate
over 2 years ago

ActionText ContentAttachment can Contain Unsanitized HTML GSA_kwCzR0hTQS1wcmpwLWg0OGYtamdmNs4AA8tC

rubygems actiontext
Potential
Moderate
over 2 years ago

Rails has possible Sensitive Session Information Leak in Active Storage GSA_kwCzR0hTQS04aDIyLThjZjctaHE2Z84AA5jP

rubygems activestorage
Potential
Moderate
over 2 years ago

Rails has possible XSS Vulnerability in Action Controller GSA_kwCzR0hTQS05ODIyLTZtOTMteHFmNM4AA5jO

rubygems rails, actionpack
Potential
Low
over 2 years ago

Rails has possible ReDoS vulnerability in Accept header parsing in Action Dispatch GSA_kwCzR0hTQS1qamh4LWpodnAtNzR3cc4AA5jN

rubygems actionpack
Potential
Moderate
about 3 years ago

Active Support Possibly Discloses Locally Encrypted Files GSA_kwCzR0hTQS1jcjVxLTZxOWYtcnE2cc4AA1eP

rubygems activesupport
Potential
Moderate
over 3 years ago

Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to GSA_kwCzR0hTQS00Zzh2LXZnNDMtd3BnZs4AA0Io

rubygems actionpack
Potential
Moderate
over 3 years ago

rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements GSA_kwCzR0hTQS14cDVoLWY4amYtcmM4cc4AAzxa

rubygems actionview
Potential
Moderate
over 3 years ago

Possible XSS Security Vulnerability in SafeBuffer#bytesplice GSA_kwCzR0hTQS1wajczLXY1bXctcG05as4AAyIp

rubygems activesupport
Potential
Low
almost 4 years ago

ReDoS based DoS vulnerability in Action Dispatch GSA_kwCzR0hTQS1wODR2LTQ1eGotd3dxas4AAxDz

rubygems actionpack
Potential
Low
almost 4 years ago

ReDoS based DoS vulnerability in Active Support's underscore GSA_kwCzR0hTQS1qNmdjLTc5Mm0tcWdtMs4AAxDy

rubygems activesupport
Potential
Moderate
almost 4 years ago

Open Redirect Vulnerability in Action Pack GSA_kwCzR0hTQS05NDQ1LTRjcjYtMzM2cs4AAxDx

rubygems actionpack
Potential
High
almost 4 years ago

Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter GSA_kwCzR0hTQS01Nzl3LTIyajQtNDc0Oc4AAxDw

rubygems activerecord
Potential
Low
almost 4 years ago

ReDoS based DoS vulnerability in Action Dispatch GSA_kwCzR0hTQS04eHd3LXgzZzMtNmpjds4AAxDv

rubygems actionpack
Potential
High
almost 4 years ago

SQL Injection Vulnerability via ActiveRecord comments GSA_kwCzR0hTQS1ocTdwLWozNzctNnY2M84AAxDu

rubygems activerecord
Potential
Critical
over 4 years ago

Active Record RCE bug with Serialized Columns GSA_kwCzR0hTQS0zaGhjLXFwNXYtOXAyas4AAtT8

rubygems activerecord
Potential
Moderate
over 4 years ago

XSS Vulnerability in Action View tag helpers GSA_kwCzR0hTQS1jaDNoLWoydmYtOTVwds1BUQ

rubygems actionview
Potential
Moderate
over 4 years ago

Cross-site Scripting Vulnerability in Action Pack GSA_kwCzR0hTQS1tbTMzLTV2ZnEtM21tM81BUA

rubygems actionpack
Potential
Moderate
over 4 years ago

Cross site scripting in actionpack Rubygem GSA_kwCzR0hTQS1xNThqLWZtdmYtOXJxNs0_jg

rubygems actionpack
Potential
Critical
over 4 years ago

Possible code injection vulnerability in Rails / Active Storage GSA_kwCzR0hTQS13NzQ5LXAzdjYtaGNjcc0wwQ

rubygems activestorage
Potential
High
over 4 years ago

Exposure of information in Action Pack GSA_kwCzR0hTQS13aDk4LXAyOHItdnJjOc0rDg

rubygems actionpack
Potential
Moderate
almost 5 years ago

actionpack Open Redirect in Host Authorization Middleware GSA_kwCzR0hTQS1xcGhjLWhmNXEtdjhmY80bRw

rubygems actionpack
Potential
High
over 5 years ago

Possible DoS Vulnerability in Action Controller Token Authentication MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTd3angtM2c3ai04NTg0

rubygems actionpack
Potential
Moderate
over 5 years ago

Possible Open Redirect Vulnerability in Action Pack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVocTIteGY4OS05anhx

rubygems actionpack
Potential
High
over 5 years ago

Denial of Service in Action Dispatch MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc4d3ctNDZ4Mi0ycDY1

rubygems actionpack
Potential
Moderate
over 5 years ago

Actionpack Open Redirect Vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg4NzctcHJxNC05eGZ3

rubygems actionpack
Potential
Moderate
about 6 years ago

XSS in Action View MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNmanYtNTQ5OC1tcGg1

rubygems actionview
Potential
Moderate
over 6 years ago

Untrusted users can run pending migrations in production in Rails MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM2cXItaDV2cS01OWpj

rubygems actionpack
Potential
Moderate
over 6 years ago

Cross site scripting vulnerability in ActionView MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY1Y3YtcjZ4Ny03OWh2

rubygems actionview
Potential
High
over 7 years ago

Denial of Service Vulnerability in Action View MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW02M2otd2g1dy1jMjUy

rubygems actionview
Potential
High
almost 8 years ago

Improper Access Control in activejob MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEycXctcm1yaC12djQy

rubygems activejob
Potential
Moderate
about 9 years ago

actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEzNGMtNDhnYy1tOWc4

rubygems actionpack
Potential
High
about 9 years ago

activerecord vulnerable to SQL Injection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc2d3EteHc0aC1mOHdq

rubygems activerecord
Potential
Moderate
about 9 years ago

actionpack Improper Authentication vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTkydzktMnBxdy1yaGpq

rubygems actionpack
Potential
Moderate
about 9 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY1amctNTU4ai1xNjdj

rubygems actionpack
Potential
Moderate
about 9 years ago

activesupport Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlmaDMtdmgzaC1xNGcz

rubygems activesupport
Potential
Moderate
about 9 years ago

actionpack CRLF injection vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZjcWYtaDRoNC02OTVt

rubygems actionpack
Potential
Moderate
about 9 years ago

Cross-site Scripting vulnerability in i18n translations helper method MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXh4cjgtODMzdi1jN3dj

rubygems actionpack
Potential
Moderate
about 9 years ago

Action Pack contains database-query restrictions bypass MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhncHAtcHA4OS00Zmdm

rubygems actionpack
Potential
Moderate
about 9 years ago

actionpack Improper Input Validation vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI3cTItNWdxZy02Yzdx

rubygems actionpack
Potential
Moderate
about 9 years ago

rails Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY5djQtN2pwNi04Yzcz

rubygems activesupport, actionpack
Potential
Moderate
about 9 years ago

actionpack Cross-Site Request Forgery vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI0ZmctcDk2di1oeGg4

rubygems actionpack
Potential
Moderate
about 9 years ago

Rails actionpack gem vulnerable to Cross-site Scripting MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1dzYtcDZtZy12aDhq

rubygems actionview, actionpack
Potential
Moderate
about 9 years ago

Rails activerecord gem has Improper Input Validation vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdqeHctNXcycS03Z3Jm

rubygems activerecord
Potential
Moderate
about 9 years ago

Moderate severity vulnerability that affects rails MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlwM3Ytd2Yydy12Mjlj

rubygems rails
Potential
Moderate
about 9 years ago

actionpack and activesupport vulnerable to information leaks MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZnOXctZzZtNC01NTdq

rubygems activesupport, actionpack
Potential
Moderate
about 9 years ago

Improper Input Validation in actionpack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThmcXgtN3B2NC0zandt

rubygems actionpack
Potential
Moderate
about 9 years ago

rails is vulnerable to CRLF injection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptZ2YtcDQ2eC05ODJo

rubygems rails
Potential
High
about 9 years ago

Rails ActiveRecord gem vulnerable to SQL injection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhmOTYtMzJxMi05cncy

rubygems activerecord
Potential
High
about 9 years ago

actionpack allows remote attackers to bypass intended access restrictions MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3dzMtM3J4ai04djZx

rubygems actionpack
Potential
High
about 9 years ago

activerecord vulnerable to SQL Injection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptbTktMnAyOS12aDJ3

rubygems activerecord
Potential
High
about 9 years ago

activerecord vulnerable to SQL Injection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg2dzYteG1xdi03cTc4

rubygems activerecord
Potential
High
about 9 years ago

Active Record contains SQL Injection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdoMnctajdjeC0yNjY0

rubygems activerecord
Potential
Moderate
about 9 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdnNjUtZ2hyZy1ocGY1

rubygems actionpack
Potential
Moderate
about 9 years ago

activesupport Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg4MzUtNzVody1wajg5

rubygems activesupport
Moderate
about 9 years ago

actionmailer email address processing causes Denial of service MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJnNW0tM2ZxcC02cHg4

rubygems actionmailer
Potential
Moderate
about 9 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk4bWYtOGY1Ny02NHFm

rubygems actionpack
Potential
Moderate
about 9 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczN2MtcTY1My1xZzk1

rubygems actionpack
Potential
Moderate
about 9 years ago

Rails vulnerable to Cross-site Scripting MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW00NnAtZ2dtNS01ajgz

rubygems actionpack, rails
Potential
Moderate
about 9 years ago

activesupport vulnerable to Denial of Service via large XML document depth MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo5NnIteHZqcS1yOXBn

rubygems activesupport
Potential
High
about 9 years ago

SQL Injection in Active Record MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1od3AtcWhwYy1oM2pt

rubygems activerecord
Potential
Low
about 9 years ago

actionpack is vulnerable to remote bypass authentication MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA2OTItN21tMy0zZnhn

rubygems actionpack
Potential
Moderate
about 9 years ago

actionview contains Path Traversal vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ4OWotNDZyaC1mcXI4

rubygems actionpack, actionview
Potential
High
about 9 years ago

actionpack is vulnerable to denial of service via a crafted HTTP Accept header MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZmcHYtYzRobS0zeDZ2

rubygems actionpack

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

Moderate 47 High 15 Low 6 Critical 3