RA
Product
rails
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 5Low 2
Watch
Add rails to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-28103 | 9.8 | Jun 4 | Action Pack is missing security headers on non-HTML responses Affected: >= 6.1.0.0, < 6.1.7.8; >= 7.0.0.0, < 7.0.8.4; >= 7.1.0.0, < 7.1.3.4; >= 7.2.0.beta1, < 7.2.0.beta2 |
| CVE-2026-66066 | 9.5 | Jul 30 | Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing Affected: < 7.2.3.2; >= 8.0.0.beta1, < 8.0.5.1; >= 8.1.0.beta1, < 8.1.3.1 |
| CVE-2024-47889 | 6.6 | Oct 16 | Action Mailer has possible ReDoS vulnerability in block_format Affected: >= 3.0.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1 |
| CVE-2024-47888 | 6.6 | Oct 16 | Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node Affected: >= 6.0.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1 |
| CVE-2024-47887 | 6.6 | Oct 16 | Action Controller has possible ReDoS vulnerability in HTTP Token authentication Affected: >= 4.0.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1 |
| CVE-2024-41128 | 6.6 | Oct 16 | Action Dispatch has possible ReDoS vulnerability in query parameter filtering Affected: >= 3.1.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1 |
| CVE-2024-32464 | 6.1 | Jun 4 | ActionText ContentAttachment can Contain Unsanitized HTML Affected: >= 7.1.0, < 7.1.3.4; = 7.2.0.beta1 |
| CVE-2025-55193 | 2.7 | Aug 13 | Active Record logging vulnerable to ANSI escape injection Affected: >= 0, < 7.1.5.2; >= 7.2, < 7.2.2.2; >= 8.0, < 8.0.2.1 |
| CVE-2024-54133 | 2.3 | Dec 10 | Possible Content Security Policy bypass in Action Dispatch Affected: >= 5.2.0, < 7.0.8.7; >= 7.1.0, < 7.1.5.1; >= 7.2.0, < 7.2.2.1; >= 8.0.0, < 8.0.0.1 |
Showing 9