AC
Product
Activerecord
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch
Add Activerecord to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-32224 | 9.8 | Dec 5 | A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker,… Affected: before 5.2.8.1; 6.0.0 before 6.0.5.1; 6.1.0 before 6.1.6.1; 7.0.0 before 7.0.3.1 |
Showing 1