AC
Product
activesupport
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add activesupport to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33170 | 6.1 | Mar 23 | Rails Active Support has a possible XSS vulnerability in SafeBuffer#% Affected: >= 8.1.0.beta1, < 8.1.2.1; >= 8.0.0.beta1, < 8.0.4.1; < 7.2.3.1 |
| CVE-2023-38037 | 5.5 | Jan 9 | ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file Affected: >= 5.2.0 before >= 5.2.0 |
| CVE-2026-33169 | 5.3 | Mar 23 | Rails Active Support has a possible ReDoS vulnerability in number_to_delimited Affected: >= 8.1.0.beta1, < 8.1.2.1; >= 8.0.0.beta1, < 8.0.4.1; < 7.2.3.1 |
| CVE-2023-28120 | 5.3 | Jan 9 | There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input Affected: 7.0.4.3 before 7.0.4.3; 6.1.7.3 before 6.1.7.3 |
Showing 4