rubygem-actionpack vulnerabilities (Red Hat)
124 vulnerabilities.
rubygem-actionpackRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumrubygem-actionpackRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highrubygem-actionpackRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumrubygem-actionpackRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highrubygem-actionpackRed HatUncontrolled Recursion in Loofah7.5 Highrubygem-actionpackRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumrubygem-actionpackRed HatInefficient Regular Expression Complexity in Loofah7.5 Highrubygem-actionpackRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 Mediumrubygem-actionpackRed HatRemote Code execution in SnakeYAML8.3 Highrubygem-actionpackRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumrubygem-actionpackRed HatPlaintext storage of tokens in pulp_ansible5.5 Mediumrubygem-actionpackRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalrubygem-actionpackRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highrubygem-actionpackRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highrubygem-actionpackRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highrubygem-actionpackRed HatDoS in SnakeYAML6.5 Mediumrubygem-actionpackRed HatDoS in SnakeYAML6.5 Mediumrubygem-actionpackRed HatDoS in SnakeYAML6.5 Mediumrubygem-actionpackRed HatDoS in SnakeYAML6.5 Mediumrubygem-actionpackRed HatDenial of Service (DoS)7.5 Highrubygem-actionpackRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highrubygem-actionpackRed HatActive Record RCE bug with Serialized Columns9.8 Criticalrubygem-actionpackRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalrubygem-actionpackRed HatThe Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few...5.5 Mediumrubygem-actionpackRed HatThe c_rehash script allows command injection7.3 Highrubygem-actionpackRed HatThe c_rehash script allows command injection7.3 Highrubygem-actionpackRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumrubygem-actionpackRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumrubygem-actionpackRed HatSQL Injection in Django9.8 Criticalrubygem-actionpackRed HatSQL Injection in Django9.8 Criticalrubygem-actionpackRed HatImproper Certificate Validation in kubeclient8.1 Highrubygem-actionpackRed HatTwo heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the...6.5 Mediumrubygem-actionpackRed HatInformation Exposure when using Puma with Rails8.0 Highrubygem-actionpackRed HatExposure of sensitive information in Action Pack7.4 Highrubygem-actionpackRed HatInfinite Loop in Django7.5 Highrubygem-actionpackRed HatCross-site Scripting in Django6.1 Mediumrubygem-actionpackRed HatDenial of service in sidekiq7.5 Highrubygem-actionpackRed HatDirectory-traversal in Django5.3 Mediumrubygem-actionpackRed HatInformation disclosure in Django7.5 Highrubygem-actionpackRed HatDenial-of-service in Django7.5 Highrubygem-actionpackRed HatA server side remote code execution vulnerability was found in Foreman project. A authenticated...7.2 Highrubygem-actionpackRed HatRCE from attacker with configuration edit priviledges through JNDI lookup6.6 Mediumrubygem-actionpackRed HatHTML Cleaner allows crafted and SVG embedded scripts to pass through8.2 Highrubygem-actionpackRed HatHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Mediumrubygem-actionpackRed HatPotential bypass of an upstream access control based on URL paths in Django7.3 Highrubygem-actionpackRed HatInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma3.7 Lowrubygem-actionpackRed HatRegular Expression Denial of Service in sqlparse7.5 Highrubygem-actionpackRed HatBuffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before...7.5 Highrubygem-actionpackRed HatBuffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv...7.5 Highrubygem-actionpackRed HatBuffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before...7.5 High- Show moreLoading…