HT
Product
https://github.com/rails/rails
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 6Low 0
Watch
Add https://github.com/rails/rails to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-32224 | 9.8 | Dec 5 | A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker,… Affected: 7.0.3.1, 6.1.6.1, 6.0.5.1, 5.2.8.1 |
| CVE-2022-21831 | 9.8 | May 26 | A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments Affected: 7.0.2.3, 6.1.4.7, 6.0.4.7, 5.2.6.3 |
Showing 2