HT
Product
https://github.com/rails/rails
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 6Low 0
Watch
Add https://github.com/rails/rails to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-22794 | 8.8 | Feb 9 | A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments Affected: 6.0.6.1, 6.1.7.1, 7.0.4.1 |
| CVE-2023-22795 | 7.5 | Feb 9 | A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match header Affected: 6.1.7.1, 7.0.4.1 |
| CVE-2023-22796 | 7.5 | Feb 9 | A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1 Affected: 6.1.7.1, 7.0.4.1 |
| CVE-2022-44566 | 7.5 | Feb 9 | A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1 Affected: 7.0.4.1, 6.1.7.1 |
| CVE-2023-22792 | 7.5 | Feb 9 | A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1 Affected: 6.0.6.1, 6.1.7.1, 7.0.4.1 |
| CVE-2021-22902 | 7.5 | Jun 11 | The actionpack ruby gem (a framework for handling and responding to web requests in Rails) before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service vulnerability in the… Affected: Fixed in 6.0.3.7, 6.1.3.2 |
| CVE-2021-22904 | 7.5 | Jun 11 | The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the Token Authentication logic in Action Controller due… Affected: Fixed in 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 |
Showing 7