Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

rubygems

actionpack

rubygems

Web apps on Rails. Simple, battle-tested conventions for building and testing MVC web applications. Works with any Rack-compatible server.

View on github.com · View on rubygems.org

Security Advisories for actionpack in rubygems

Low
11 months ago

Possible Content Security Policy bypass in Action Dispatch GSA_kwCzR0hTQS12Zm01LXJtcmgtajI2ds4ABCQK

rubygems actionpack
Moderate
about 1 year ago

Possible ReDoS vulnerability in HTTP Token authentication in Action Controller GSA_kwCzR0hTQS12Zmc5LXIzZnEtanZ4NM4ABATd

rubygems actionpack
Moderate
about 1 year ago

Possible ReDoS vulnerability in query parameter filtering in Action Dispatch GSA_kwCzR0hTQS14NzZ3LTZ2anItOHhnas4ABATe

rubygems actionpack
Moderate
over 1 year ago

Missing security headers in Action Pack on non-HTML responses GSA_kwCzR0hTQS1md2hyLTg4cXgtaDlnN84AA8tD

rubygems actionpack
Moderate
over 1 year ago

Rails has possible XSS Vulnerability in Action Controller GSA_kwCzR0hTQS05ODIyLTZtOTMteHFmNM4AA5jO

rubygems actionpack
Low
over 1 year ago

Rails has possible ReDoS vulnerability in Accept header parsing in Action Dispatch GSA_kwCzR0hTQS1qamh4LWpodnAtNzR3cc4AA5jN

rubygems actionpack
Moderate
over 2 years ago

Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to GSA_kwCzR0hTQS00Zzh2LXZnNDMtd3BnZs4AA0Io

rubygems actionpack
Low
almost 3 years ago

ReDoS based DoS vulnerability in Action Dispatch GSA_kwCzR0hTQS1wODR2LTQ1eGotd3dxas4AAxDz

rubygems actionpack
Moderate
almost 3 years ago

Open Redirect Vulnerability in Action Pack GSA_kwCzR0hTQS05NDQ1LTRjcjYtMzM2cs4AAxDx

rubygems actionpack
Low
almost 3 years ago

ReDoS based DoS vulnerability in Action Dispatch GSA_kwCzR0hTQS04eHd3LXgzZzMtNmpjds4AAxDv

rubygems actionpack
Moderate
over 3 years ago

Cross-site Scripting Vulnerability in Action Pack GSA_kwCzR0hTQS1tbTMzLTV2ZnEtM21tM81BUA

rubygems actionpack
Moderate
over 3 years ago

Cross site scripting in actionpack Rubygem GSA_kwCzR0hTQS1xNThqLWZtdmYtOXJxNs0_jg

rubygems actionpack
High
over 3 years ago

Exposure of information in Action Pack GSA_kwCzR0hTQS13aDk4LXAyOHItdnJjOc0rDg

rubygems actionpack
Moderate
almost 4 years ago

actionpack Open Redirect in Host Authorization Middleware GSA_kwCzR0hTQS1xcGhjLWhmNXEtdjhmY80bRw

rubygems actionpack
Moderate
about 4 years ago

Open Redirect in ActionPack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJycXctdjI2NS1qZjhj

rubygems actionpack
High
over 4 years ago

Possible DoS Vulnerability in Action Controller Token Authentication MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTd3angtM2c3ai04NTg0

rubygems actionpack
High
over 4 years ago

Action Pack contains Information Disclosure / Unintended Method Execution vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhqZzQtOHE1Zi14NmZt

rubygems actionpack
Moderate
over 4 years ago

Possible Open Redirect Vulnerability in Action Pack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVocTIteGY4OS05anhx

rubygems actionpack
High
over 4 years ago

Denial of Service in Action Dispatch MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc4d3ctNDZ4Mi0ycDY1

rubygems actionpack
Moderate
over 4 years ago

Cross-site scripting in actionpack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM1bW0tY2M2ci04Zmpw

rubygems actionpack
Moderate
over 4 years ago

Actionpack Open Redirect Vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg4NzctcHJxNC05eGZ3

rubygems actionpack
Moderate
over 5 years ago

Untrusted users can run pending migrations in production in Rails MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM2cXItaDV2cS01OWpj

rubygems actionpack
Moderate
over 5 years ago

Ability to forge per-form CSRF tokens in Rails MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpwNXYtNWd4NC1qbWo5

rubygems actionpack
High
over 5 years ago

Possible Strong Parameters Bypass in ActionPack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg3MjctbTZnai1tYzM3

rubygems actionpack
Moderate
about 8 years ago

actionpack CRLF injection vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZjcWYtaDRoNC02OTVt

rubygems actionpack
Moderate
about 8 years ago

actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEzNGMtNDhnYy1tOWc4

rubygems actionpack
Moderate
about 8 years ago

Cross-site Scripting in actionpack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ4amotNXg2aC04dm1m

rubygems actionpack
Moderate
about 8 years ago

actionpack Improper Authentication vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTkydzktMnBxdy1yaGpq

rubygems actionpack
Moderate
about 8 years ago

Cross-site Scripting vulnerability in i18n translations helper method MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXh4cjgtODMzdi1jN3dj

rubygems actionpack
Moderate
about 8 years ago

rails Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY5djQtN2pwNi04Yzcz

rubygems activesupport, actionpack
Moderate
about 8 years ago

Improper Input Validation in actionpack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThmcXgtN3B2NC0zandt

rubygems actionpack
Moderate
about 8 years ago

Action Pack contains database-query restrictions bypass MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhncHAtcHA4OS00Zmdm

rubygems actionpack
Moderate
about 8 years ago

actionpack and activesupport vulnerable to information leaks MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZnOXctZzZtNC01NTdq

rubygems activesupport, actionpack
Moderate
about 8 years ago

Cross site scripting that affects rails MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThxcmgtaDltMi01ZnZm

rubygems activesupport, actionpack
Moderate
about 8 years ago

actionpack Improper Input Validation vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTN2ZnctN3JjcC0zeGdt

rubygems actionpack
Moderate
about 8 years ago

actionpack Improper Input Validation vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI3cTItNWdxZy02Yzdx

rubygems actionpack
Moderate
about 8 years ago

Rails actionpack gem vulnerable to Cross-site Scripting MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1dzYtcDZtZy12aDhq

rubygems actionpack
Moderate
about 8 years ago

actionpack Cross-Site Request Forgery vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI0ZmctcDk2di1oeGg4

rubygems actionpack
Moderate
about 8 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY1amctNTU4ai1xNjdj

rubygems actionpack
High
about 8 years ago

actionpack allows remote attackers to bypass intended access restrictions MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3dzMtM3J4ai04djZx

rubygems actionpack
Moderate
about 8 years ago

actionpack Improper Input Validation vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1weGYtZ2N3Mi1wdzVx

rubygems actionpack
Moderate
about 8 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk4bWYtOGY1Ny02NHFm

rubygems actionpack
High
about 8 years ago

actionpack Improper Input Validation vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptZ3ctNnZqZy1qandn

rubygems actionpack
Moderate
about 8 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdnNjUtZ2hyZy1ocGY1

rubygems actionpack
Moderate
about 8 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4MzgtdmZwcS1mbWYy

rubygems actionpack
Moderate
about 8 years ago

actionpack vulnerable to Cross-site Scripting MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY5OW0tbWNqbS05Y3c4

rubygems actionpack
Moderate
about 8 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE3NTktaHd2Yy1tM2pn

rubygems actionpack
Moderate
about 8 years ago

actionpack Cross-site Scripting vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczN2MtcTY1My1xZzk1

rubygems actionpack
Moderate
about 8 years ago

actionpack vulnerable to Cross-site Scripting MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZoNXEtOTZocC05amdt

rubygems actionpack
Moderate
about 8 years ago

Directory traversal vulnerability in actionpack MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg1Nm0tdnd4Yy0zcXB3

rubygems actionpack
Low
about 8 years ago

actionpack is vulnerable to remote bypass authentication MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA2OTItN21tMy0zZnhn

rubygems actionpack
Moderate
about 8 years ago

actionpack vulnerable to Path Traversal MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI5Z3ItdzU3Zi1ycGZ3

rubygems actionpack
High
about 8 years ago

actionpack is vulnerable to denial of service because of a wildcard controller route MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTloNmctZ3A5NS14M3E1

rubygems actionpack
Moderate
about 8 years ago

actionpack allows bypass of database-query restrictions MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdwdzctd3hqbS1jdzhy

rubygems actionpack
High
about 8 years ago

actionpack Path Traversal vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ4ODUtajVqMi0yN2p4

rubygems actionpack
Moderate
about 8 years ago

actionpack Improper Input Validation vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdjZ3AtYzNnNy1xdnJ3

rubygems actionpack
High
about 8 years ago

actionpack allows remote code execution via application's unrestricted use of render method MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc4cmMtOGMyOS1wNDVn

rubygems actionpack
High
about 8 years ago

actionpack is vulnerable to denial of service via a crafted HTTP Accept header MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZmcHYtYzRobS0zeDZ2

rubygems actionpack

Filter by Severity

Moderate 42 High 11 Low 5