Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

rubygems

actionpack

rubygems

Web apps on Rails. Simple, battle-tested conventions for building and testing MVC web applications. Works with any Rack-compatible server.

View on github.com · View on rubygems.org

Security Advisories for actionpack in rubygems

Low
5 months ago

Rails has a possible XSS vulnerability in its Action Pack debug exceptions GSA_kwCzR0hTQS1wZ200LTQzOWMtNWpwNs4ABUDA

rubygems actionpack
Potential
Critical
about 1 year ago

Active Storage allowed transformation methods that were potentially unsafe GSA_kwCzR0hTQS1yNG1nLTQ0MzMtYzdnM84ABLDC

rubygems activestorage
Potential
Moderate
about 1 year ago

Active Record logging vulnerable to ANSI escape injection GSA_kwCzR0hTQS03NnI3LWhoeGotcjc3Ns4ABLC9

rubygems activerecord
Low
over 1 year ago

Possible Content Security Policy bypass in Action Dispatch GSA_kwCzR0hTQS12Zm01LXJtcmgtajI2ds4ABCQK

rubygems actionpack
Potential
Moderate
almost 2 years ago

Possible ReDoS vulnerability in block_format in Action Mailer GSA_kwCzR0hTQS1oNDdoLW13cDktYzZxNs4ABATf

rubygems actionmailer
Potential
Moderate
almost 2 years ago

Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action Text GSA_kwCzR0hTQS13d2h2LXd4djktcnBnd84ABATc

rubygems actiontext
Moderate
almost 2 years ago

Possible ReDoS vulnerability in HTTP Token authentication in Action Controller GSA_kwCzR0hTQS12Zmc5LXIzZnEtanZ4NM4ABATd

rubygems actionpack
Moderate
almost 2 years ago

Possible ReDoS vulnerability in query parameter filtering in Action Dispatch GSA_kwCzR0hTQS14NzZ3LTZ2anItOHhnas4ABATe

rubygems actionpack
Moderate
about 2 years ago

Missing security headers in Action Pack on non-HTML responses GSA_kwCzR0hTQS1md2hyLTg4cXgtaDlnN84AA8tD

rubygems actionpack
Potential
Moderate
about 2 years ago

ActionText ContentAttachment can Contain Unsanitized HTML GSA_kwCzR0hTQS1wcmpwLWg0OGYtamdmNs4AA8tC

rubygems actiontext
Potential
Moderate
over 2 years ago

Rails has possible Sensitive Session Information Leak in Active Storage GSA_kwCzR0hTQS04aDIyLThjZjctaHE2Z84AA5jP

rubygems activestorage
Moderate
over 2 years ago

Rails has possible XSS Vulnerability in Action Controller GSA_kwCzR0hTQS05ODIyLTZtOTMteHFmNM4AA5jO

rubygems actionpack
Low
over 2 years ago

Rails has possible ReDoS vulnerability in Accept header parsing in Action Dispatch GSA_kwCzR0hTQS1qamh4LWpodnAtNzR3cc4AA5jN

rubygems actionpack
Potential
Moderate
about 3 years ago

Active Support Possibly Discloses Locally Encrypted Files GSA_kwCzR0hTQS1jcjVxLTZxOWYtcnE2cc4AA1eP

rubygems activesupport
Moderate
about 3 years ago

Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to GSA_kwCzR0hTQS00Zzh2LXZnNDMtd3BnZs4AA0Io

rubygems actionpack
Potential
Moderate
about 3 years ago

rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements GSA_kwCzR0hTQS14cDVoLWY4amYtcmM4cc4AAzxa

rubygems actionview
Potential
Moderate
over 3 years ago

Possible XSS Security Vulnerability in SafeBuffer#bytesplice GSA_kwCzR0hTQS1wajczLXY1bXctcG05as4AAyIp

rubygems activesupport
Low
over 3 years ago

ReDoS based DoS vulnerability in Action Dispatch GSA_kwCzR0hTQS1wODR2LTQ1eGotd3dxas4AAxDz

rubygems actionpack
Potential
Low
over 3 years ago

ReDoS based DoS vulnerability in Active Support's underscore GSA_kwCzR0hTQS1qNmdjLTc5Mm0tcWdtMs4AAxDy

rubygems activesupport
Moderate
over 3 years ago

Open Redirect Vulnerability in Action Pack GSA_kwCzR0hTQS05NDQ1LTRjcjYtMzM2cs4AAxDx

rubygems actionpack
Potential
High
over 3 years ago

Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter GSA_kwCzR0hTQS01Nzl3LTIyajQtNDc0Oc4AAxDw

rubygems activerecord
Low
over 3 years ago

ReDoS based DoS vulnerability in Action Dispatch GSA_kwCzR0hTQS04eHd3LXgzZzMtNmpjds4AAxDv

rubygems actionpack
Potential
High
over 3 years ago

SQL Injection Vulnerability via ActiveRecord comments GSA_kwCzR0hTQS1ocTdwLWozNzctNnY2M84AAxDu

rubygems activerecord
Potential
Critical
about 4 years ago

Active Record RCE bug with Serialized Columns GSA_kwCzR0hTQS0zaGhjLXFwNXYtOXAyas4AAtT8

rubygems activerecord
Potential
Moderate
over 4 years ago

XSS Vulnerability in Action View tag helpers GSA_kwCzR0hTQS1jaDNoLWoydmYtOTVwds1BUQ

rubygems actionview
Moderate
over 4 years ago

Cross-site Scripting Vulnerability in Action Pack GSA_kwCzR0hTQS1tbTMzLTV2ZnEtM21tM81BUA

rubygems actionpack
Moderate
over 4 years ago

Cross site scripting in actionpack Rubygem GSA_kwCzR0hTQS1xNThqLWZtdmYtOXJxNs0_jg

rubygems actionpack
Potential
Critical
over 4 years ago

Possible code injection vulnerability in Rails / Active Storage GSA_kwCzR0hTQS13NzQ5LXAzdjYtaGNjcc0wwQ

rubygems activestorage
High
over 4 years ago

Exposure of information in Action Pack GSA_kwCzR0hTQS13aDk4LXAyOHItdnJjOc0rDg

rubygems actionpack
Moderate
over 4 years ago

actionpack Open Redirect in Host Authorization Middleware GSA_kwCzR0hTQS1xcGhjLWhmNXEtdjhmY80bRw

rubygems actionpack
Moderate
about 5 years ago

Open Redirect in ActionPack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJycXctdjI2NS1qZjhj

rubygems actionpack
High
over 5 years ago

Possible DoS Vulnerability in Action Controller Token Authentication MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTd3angtM2c3ai04NTg0

rubygems actionpack
High
over 5 years ago

Action Pack contains Information Disclosure / Unintended Method Execution vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhqZzQtOHE1Zi14NmZt

rubygems actionpack
Moderate
over 5 years ago

Possible Open Redirect Vulnerability in Action Pack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVocTIteGY4OS05anhx

rubygems actionpack
High
over 5 years ago

Denial of Service in Action Dispatch MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc4d3ctNDZ4Mi0ycDY1

rubygems actionpack
Moderate
over 5 years ago

Cross-site scripting in actionpack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM1bW0tY2M2ci04Zmpw

rubygems actionpack
Moderate
over 5 years ago

Actionpack Open Redirect Vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg4NzctcHJxNC05eGZ3

rubygems actionpack
Potential
Moderate
almost 6 years ago

XSS in Action View MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNmanYtNTQ5OC1tcGg1

rubygems actionview
Moderate
about 6 years ago

Untrusted users can run pending migrations in production in Rails MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM2cXItaDV2cS01OWpj

rubygems actionpack
Moderate
over 6 years ago

Ability to forge per-form CSRF tokens in Rails MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpwNXYtNWd4NC1qbWo5

rubygems actionpack
High
over 6 years ago

Possible Strong Parameters Bypass in ActionPack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg3MjctbTZnai1tYzM3

rubygems actionpack
Potential
Moderate
over 6 years ago

Cross site scripting vulnerability in ActionView MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY1Y3YtcjZ4Ny03OWh2

rubygems actionview
Potential
High
over 7 years ago

Denial of Service Vulnerability in Action View MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW02M2otd2g1dy1jMjUy

rubygems actionview
Potential
High
over 7 years ago

Improper Access Control in activejob MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEycXctcm1yaC12djQy

rubygems activejob
Potential
Moderate
almost 9 years ago

Moderate severity vulnerability that affects rails MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlwM3Ytd2Yydy12Mjlj

rubygems rails
Potential
High
almost 9 years ago

activerecord vulnerable to SQL Injection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptbTktMnAyOS12aDJ3

rubygems activerecord
High
almost 9 years ago

actionpack allows remote attackers to bypass intended access restrictions MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3dzMtM3J4ai04djZx

rubygems actionpack
Potential
High
almost 9 years ago

Rails ActiveRecord gem vulnerable to SQL injection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhmOTYtMzJxMi05cncy

rubygems activerecord
Potential
Moderate
almost 9 years ago

rails is vulnerable to CRLF injection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptZ2YtcDQ2eC05ODJo

rubygems rails
Moderate
almost 9 years ago

Improper Input Validation in actionpack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThmcXgtN3B2NC0zandt

rubygems actionpack
Moderate
almost 9 years ago

Cross site scripting that affects rails MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThxcmgtaDltMi01ZnZm

rubygems activesupport, actionpack
Moderate
almost 9 years ago

actionpack and activesupport vulnerable to information leaks MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZnOXctZzZtNC01NTdq

rubygems activesupport, actionpack
Potential
Moderate
almost 9 years ago

Rails activerecord gem has Improper Input Validation vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdqeHctNXcycS03Z3Jm

rubygems activerecord
Moderate
almost 9 years ago

Rails actionpack gem vulnerable to Cross-site Scripting MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1dzYtcDZtZy12aDhq

rubygems actionpack
Moderate
almost 9 years ago

actionpack Cross-Site Request Forgery vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI0ZmctcDk2di1oeGg4

rubygems actionpack
Moderate
almost 9 years ago

rails Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY5djQtN2pwNi04Yzcz

rubygems activesupport, actionpack
Moderate
almost 9 years ago

actionpack Improper Input Validation vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI3cTItNWdxZy02Yzdx

rubygems actionpack
Potential
High
almost 9 years ago

activerecord vulnerable to SQL Injection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg2dzYteG1xdi03cTc4

rubygems activerecord
Moderate
almost 9 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY1amctNTU4ai1xNjdj

rubygems actionpack
Potential
Moderate
almost 9 years ago

activesupport Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlmaDMtdmgzaC1xNGcz

rubygems activesupport
Moderate
almost 9 years ago

actionpack CRLF injection vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZjcWYtaDRoNC02OTVt

rubygems actionpack
Moderate
almost 9 years ago

actionpack Improper Input Validation vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTN2ZnctN3JjcC0zeGdt

rubygems actionpack
Moderate
almost 9 years ago

Cross-site Scripting vulnerability in i18n translations helper method MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXh4cjgtODMzdi1jN3dj

rubygems actionpack
Moderate
almost 9 years ago

Cross-site Scripting in actionpack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ4amotNXg2aC04dm1m

rubygems actionpack
Moderate
almost 9 years ago

Action Pack contains database-query restrictions bypass MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhncHAtcHA4OS00Zmdm

rubygems actionpack
Moderate
almost 9 years ago

actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEzNGMtNDhnYy1tOWc4

rubygems actionpack
Potential
High
almost 9 years ago

activerecord vulnerable to SQL Injection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc2d3EteHc0aC1mOHdq

rubygems activerecord
Moderate
almost 9 years ago

actionpack Improper Authentication vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTkydzktMnBxdy1yaGpq

rubygems actionpack
Moderate
almost 9 years ago

actionpack vulnerable to Cross-site Scripting MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY5OW0tbWNqbS05Y3c4

rubygems actionpack
Moderate
almost 9 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4MzgtdmZwcS1mbWYy

rubygems actionpack
Moderate
almost 9 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE3NTktaHd2Yy1tM2pn

rubygems actionpack
High
almost 9 years ago

actionpack Improper Input Validation vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptZ3ctNnZqZy1qandn

rubygems actionpack
Potential
High
almost 9 years ago

Active Record contains SQL Injection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdoMnctajdjeC0yNjY0

rubygems activerecord
Moderate
almost 9 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdnNjUtZ2hyZy1ocGY1

rubygems actionpack
Potential
Moderate
almost 9 years ago

activesupport Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg4MzUtNzVody1wajg5

rubygems activesupport
Moderate
almost 9 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk4bWYtOGY1Ny02NHFm

rubygems actionpack
Moderate
almost 9 years ago

actionpack Improper Input Validation vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1weGYtZ2N3Mi1wdzVx

rubygems actionpack
Moderate
almost 9 years ago

Directory traversal vulnerability in actionpack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg1Nm0tdnd4Yy0zcXB3

rubygems actionpack
Potential
Moderate
almost 9 years ago

activesupport vulnerable to Denial of Service via large XML document depth MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo5NnIteHZqcS1yOXBn

rubygems activesupport
Moderate
almost 9 years ago

actionpack vulnerable to Path Traversal MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI5Z3ItdzU3Zi1ycGZ3

rubygems actionpack
Potential
High
almost 9 years ago

SQL Injection in Active Record MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1od3AtcWhwYy1oM2pt

rubygems activerecord
High
almost 9 years ago

actionpack Path Traversal vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ4ODUtajVqMi0yN2p4

rubygems actionpack
Moderate
almost 9 years ago

actionpack Improper Input Validation vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdjZ3AtYzNnNy1xdnJ3

rubygems actionpack
Potential
Moderate
almost 9 years ago

Rails vulnerable to Cross-site Scripting MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW00NnAtZ2dtNS01ajgz

rubygems rails
Moderate
almost 9 years ago

actionpack allows bypass of database-query restrictions MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdwdzctd3hqbS1jdzhy

rubygems actionpack
Moderate
almost 9 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczN2MtcTY1My1xZzk1

rubygems actionpack
Moderate
almost 9 years ago

actionpack vulnerable to Cross-site Scripting MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZoNXEtOTZocC05amdt

rubygems actionpack
Low
almost 9 years ago

actionpack is vulnerable to remote bypass authentication MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA2OTItN21tMy0zZnhn

rubygems actionpack
High
almost 9 years ago

actionpack is vulnerable to denial of service because of a wildcard controller route MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTloNmctZ3A5NS14M3E1

rubygems actionpack
High
almost 9 years ago

actionpack is vulnerable to denial of service via a crafted HTTP Accept header MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZmcHYtYzRobS0zeDZ2

rubygems actionpack
Potential
Moderate
almost 9 years ago

actionview contains Path Traversal vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ4OWotNDZyaC1mcXI4

rubygems actionview
High
almost 9 years ago

actionpack allows remote code execution via application's unrestricted use of render method MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc4cmMtOGMyOS1wNDVn

rubygems actionpack

Filter by Severity

Moderate 61 High 21 Low 7 Critical 3