RA
Product
rails
by rails · last CVE Jul 30, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 5Low 2
Watch

Add rails to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-47889
6.6
1%
Oct 16
Action Mailer has possible ReDoS vulnerability in block_format
Affected: >= 3.0.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1
CVE-2024-47888
6.6
1%
Oct 16
Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node
Affected: >= 6.0.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1
CVE-2024-47887
6.6
1%
Oct 16
Action Controller has possible ReDoS vulnerability in HTTP Token authentication
Affected: >= 4.0.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1
CVE-2024-41128
6.6
1%
Oct 16
Action Dispatch has possible ReDoS vulnerability in query parameter filtering
Affected: >= 3.1.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1
CVE-2024-32464
6.1
0%
Jun 4
ActionText ContentAttachment can Contain Unsanitized HTML
Affected: >= 7.1.0, < 7.1.3.4; = 7.2.0.beta1
Showing 5