AR
Product
Active Record Session Store
by Rubyonrails · last CVE Mar 5, 2021
1
CVEs
0
On KEV
5.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add Active Record Session Store to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-25025
5.3
2%
Mar 5
The activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby on Rails does not use a constant-time approach when delivering information about…
Affected: through 1.1.3
Showing 1