RA
Product
rails
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 5Low 2
Watch
Add rails to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-47889 | 6.6 | Oct 16 | Action Mailer has possible ReDoS vulnerability in block_format Affected: >= 3.0.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1 |
| CVE-2024-47888 | 6.6 | Oct 16 | Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node Affected: >= 6.0.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1 |
| CVE-2024-47887 | 6.6 | Oct 16 | Action Controller has possible ReDoS vulnerability in HTTP Token authentication Affected: >= 4.0.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1 |
| CVE-2024-41128 | 6.6 | Oct 16 | Action Dispatch has possible ReDoS vulnerability in query parameter filtering Affected: >= 3.1.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1 |
| CVE-2024-32464 | 6.1 | Jun 4 | ActionText ContentAttachment can Contain Unsanitized HTML Affected: >= 7.1.0, < 7.1.3.4; = 7.2.0.beta1 |
Showing 5
