Login Request a demo
AC
Product
Activerecord
by Activerecord Project · last CVE Feb 9, 2023
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 2Medium 0Low 0
Severity
All severities3Critical1High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Activerecord to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-32224
9.8
3%
Dec 5
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker,…
Affected: before 5.2.8.1; 6.0.0 before 6.0.5.1; 6.1.0 before 6.1.6.1; 7.0.0 before 7.0.3.1
CVE-2023-22794
8.8
2%
Feb 9
A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments
Affected: 6.0.0 before 6.0.6.1; 6.1.0 before 6.1.7.1; 7.0.0 before 7.0.4.1
CVE-2022-44566
7.5
1%
Feb 9
A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1
Affected: before 6.1.7.1; 7.0.0 before 7.0.4.1
Showing 3