carrierwave Security Advisories - Rubygems | Ecosyste.ms: Advisories

carrierwave

Upload files in your Ruby applications, map them to a range of ORMs, store them on different backends.

View on github.com · View on rubygems.org

Security Advisories for carrierwave in rubygems

Moderate

5 months ago

CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters GSA_kwCzR0hTQS03ZzI2LTJxZ2otY2hmZ84ABXbA

rubygems carrierwave

Moderate

over 2 years ago

CarrierWave content-Type allowlist bypass vulnerability which possibly leads to XSS remained GSA_kwCzR0hTQS12Zm12LWpmYzUtcGpqd84AA6Re

rubygems carrierwave

Moderate

almost 3 years ago

CarrierWave Content-Type allowlist bypass vulnerability, possibly leading to XSS GSA_kwCzR0hTQS1neGh4LWc0ZnEtNDloas4AA3a3

rubygems carrierwave

High

over 5 years ago

Code Injection vulnerability in CarrierWave::RMagick MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNmM3ctZzg2aC0zNXg0

rubygems carrierwave

Moderate

over 5 years ago

Server-side request forgery in CarrierWave MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZ3Y20tNjM2cC02OHI1

rubygems carrierwave

Filter by Severity

Moderate 4 High 1