RA
Product
rails
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 7Low 2
Watch
Add rails to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-28103 | 9.8 | Jun 4 | Action Pack is missing security headers on non-HTML responses Affected: >= 6.1.0.0, < 6.1.7.8; >= 7.0.0.0, < 7.0.8.4; >= 7.1.0.0, < 7.1.3.4; >= 7.2.0.beta1, < 7.2.0.beta2 |
| CVE-2026-66066 | 9.5 | Jul 30 | Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing Affected: < 7.2.3.2; >= 8.0.0.beta1, < 8.0.5.1; >= 8.1.0.beta1, < 8.1.3.1 |
Showing 2