HT
Product
https://github.com/rails/rails
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 3Low 0
Watch
Add https://github.com/rails/rails to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-22794 | 8.8 | Feb 9 | A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments Affected: 6.0.6.1, 6.1.7.1, 7.0.4.1 |
| CVE-2023-22792 | 7.5 | Feb 9 | A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1 Affected: 6.0.6.1, 6.1.7.1, 7.0.4.1 |
| CVE-2022-44566 | 7.5 | Feb 9 | A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1 Affected: 7.0.4.1, 6.1.7.1 |
| CVE-2023-22795 | 7.5 | Feb 9 | A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match header Affected: 6.1.7.1, 7.0.4.1 |
| CVE-2023-22796 | 7.5 | Feb 9 | A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1 Affected: 6.1.7.1, 7.0.4.1 |
Showing 5