activerecord
Databases on Rails. Build a persistent domain model by mapping database tables to Ruby classes. Strong conventions for associations, validations, aggregations, migrations, and testing come baked-in.
Security Advisories for activerecord in rubygems
Potential
Critical
about 1 year ago
Active Storage allowed transformation methods that were potentially unsafe
rubygems
activestorage
Moderate
about 1 year ago
Active Record logging vulnerable to ANSI escape injection
rubygems
activerecord
Potential
Potential
Moderate
almost 2 years ago
Possible ReDoS vulnerability in block_format in Action Mailer
rubygems
actionmailer
Potential
Moderate
almost 2 years ago
Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action Text
rubygems
actiontext
Potential
Moderate
almost 2 years ago
Possible ReDoS vulnerability in HTTP Token authentication in Action Controller
rubygems
actionpack
Potential
Moderate
almost 2 years ago
Possible ReDoS vulnerability in query parameter filtering in Action Dispatch
rubygems
actionpack
Potential
Moderate
about 2 years ago
Missing security headers in Action Pack on non-HTML responses
rubygems
actionpack
Potential
Moderate
about 2 years ago
ActionText ContentAttachment can Contain Unsanitized HTML
rubygems
actiontext
Potential
Moderate
over 2 years ago
Rails has possible Sensitive Session Information Leak in Active Storage
rubygems
activestorage
Potential
Moderate
over 2 years ago
Rails has possible XSS Vulnerability in Action Controller
rubygems
actionpack
Potential
Low
over 2 years ago
Rails has possible ReDoS vulnerability in Accept header parsing in Action Dispatch
rubygems
actionpack
Potential
Moderate
almost 3 years ago
Active Support Possibly Discloses Locally Encrypted Files
rubygems
activesupport
Potential
Moderate
about 3 years ago
Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to
rubygems
actionpack
Potential
Moderate
about 3 years ago
rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements
rubygems
actionview
Potential
Moderate
over 3 years ago
Possible XSS Security Vulnerability in SafeBuffer#bytesplice
rubygems
activesupport
Potential
Potential
Low
over 3 years ago
ReDoS based DoS vulnerability in Active Support's underscore
rubygems
activesupport
Potential
High
over 3 years ago
Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
rubygems
activerecord
Potential
Critical
over 4 years ago
Active Record component in Ruby on Rails has a data-type injection vulnerability
rubygems
activerecord
Potential
Potential
Potential
Potential
Critical
over 4 years ago
Possible code injection vulnerability in Rails / Active Storage
rubygems
activestorage
Potential
Potential
Moderate
over 4 years ago
actionpack Open Redirect in Host Authorization Middleware
rubygems
actionpack
Potential
High
over 5 years ago
Possible DoS Vulnerability in Action Controller Token Authentication
rubygems
actionpack
Potential
Potential
Potential
High
over 5 years ago
Active Record subject to Regular Expression Denial-of-Service (ReDoS)
rubygems
activerecord
Potential
Potential
Moderate
about 6 years ago
Untrusted users can run pending migrations in production in Rails
rubygems
actionpack
Potential
Potential
Potential
Moderate
almost 9 years ago
Rails activerecord gem has Improper Input Validation vulnerability
rubygems
activerecord
Potential
High
almost 9 years ago
actionpack allows remote attackers to bypass intended access restrictions
rubygems
actionpack
Potential
Potential
Potential
Moderate
almost 9 years ago
actionpack and activesupport vulnerable to information leaks
rubygems
activesupport, actionpack
Potential
Potential
Moderate
almost 9 years ago
Rails actionpack gem vulnerable to Cross-site Scripting
rubygems
actionpack
Potential
Potential
Moderate
almost 9 years ago
rails Cross-site Scripting vulnerability
rubygems
activesupport, actionpack
Potential
Potential
Potential
Potential
Potential
Moderate
almost 9 years ago
Cross-site Scripting vulnerability in i18n translations helper method
rubygems
actionpack
Potential
Moderate
almost 9 years ago
Action Pack contains database-query restrictions bypass
rubygems
actionpack
Moderate
almost 9 years ago
Active Record vulnerable to SQL Injection via nested query parameters
rubygems
activerecord
Potential
Moderate
almost 9 years ago
actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request
rubygems
actionpack
Potential
Moderate
almost 9 years ago
ActiveRecord vulnerable to modification of protected model attributes
rubygems
activerecord
Moderate
almost 9 years ago
Active Record allows bypassing of database-query restrictions
rubygems
activerecord
Potential
Potential
Potential
Critical
almost 9 years ago
Active Record contains deserialization of arbitrary YAML
rubygems
activerecord
Moderate
almost 9 years ago
Array data injection vulnerability in activerecord
rubygems
activerecord
High
almost 9 years ago
Active Record subject to strong parameters protection bypass
rubygems
activerecord
High
almost 9 years ago
Active Record contains SQL Injection via improper range quoting
rubygems
activerecord
Potential
Potential
Potential
Potential
Moderate
almost 9 years ago
activesupport vulnerable to Denial of Service via large XML document depth
rubygems
activesupport
Potential
High
almost 9 years ago
actionpack is vulnerable to denial of service via a crafted HTTP Accept header
rubygems
actionpack
Potential
High
almost 9 years ago
ActiveRecord in Ruby on Rails allows database-query bypass
rubygems
activerecord