rubygem-activesupport vulnerabilities (Red Hat)
112 vulnerabilities.
rubygem-activesupportRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highrubygem-activesupportRed HatJetty accepts "+" prefixed value in Content-Length5.3 Mediumrubygem-activesupportRed HatJetty vulnerable to errant command quoting in CGI Servlet3.5 Lowrubygem-activesupportRed HatDjango has regular expression denial of service vulnerability in EmailValidator/URLValidator7.5 Highrubygem-activesupportRed HatActionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to4.0 Mediumrubygem-activesupportRed HatUnintended leak of Proxy-Authorization header in requests6.1 Mediumrubygem-activesupportRed HatA Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2...5.3 Mediumrubygem-activesupportRed HatDjango bypasses validation when using one form field to upload multiple files9.8 Criticalrubygem-activesupportRed HatAudited Log Integrity Errors Due to Race Condition3.1 Lowrubygem-activesupportRed HatParser contains an inefficient regular expression in sqlparse5.5 Mediumrubygem-activesupportRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Highrubygem-activesupportRed HatPossible Denial of Service Vulnerability in Rack's header parsing5.3 Mediumrubygem-activesupportRed HatRack has possible DoS Vulnerability in Multipart MIME parsing7.5 Highrubygem-activesupportRed HatResource exhaustion in Django7.5 Highrubygem-activesupportRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 Highrubygem-activesupportRed HatDenial of Service Vulnerability in Rack Content-Disposition parsing7.5 Highrubygem-activesupportRed HatReDoS based DoS vulnerability in Action Dispatch7.5 Highrubygem-activesupportRed HatReDoS based DoS vulnerability in Active Support's underscore7.5 Highrubygem-activesupportRed HatDenial of Service Vulnerability in ActiveRecord's PostgreSQL adapter7.5 Highrubygem-activesupportRed HatReDoS based DoS vulnerability in Action Dispatch7.5 Highrubygem-activesupportRed HatSQL Injection Vulnerability via ActiveRecord comments8.8 Highrubygem-activesupportRed HatDenial of service via header parsing in Rack7.5 Highrubygem-activesupportRed HatDenial of service via multipart parsing in Rack7.5 Highrubygem-activesupportRed HatReDoS based DoS vulnerability in GlobalID7.5 Highrubygem-activesupportRed HatCode injection in ruby git8.0 Highrubygem-activesupportRed Hatruby-git has potential remote code execution vulnerability8.0 Highrubygem-activesupportRed HatPython Charmers Future denial of service vulnerability7.5 Highrubygem-activesupportRed HatA blind site-to-site request forgery vulnerability was found in Satellite server. It is possible...4.5 Mediumrubygem-activesupportRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumrubygem-activesupportRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highrubygem-activesupportRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumrubygem-activesupportRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highrubygem-activesupportRed HatUncontrolled Recursion in Loofah7.5 Highrubygem-activesupportRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumrubygem-activesupportRed HatInefficient Regular Expression Complexity in Loofah7.5 Highrubygem-activesupportRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 Mediumrubygem-activesupportRed HatRemote Code execution in SnakeYAML8.3 Highrubygem-activesupportRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumrubygem-activesupportRed HatPlaintext storage of tokens in pulp_ansible5.5 Mediumrubygem-activesupportRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalrubygem-activesupportRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highrubygem-activesupportRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highrubygem-activesupportRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highrubygem-activesupportRed HatDoS in SnakeYAML6.5 Mediumrubygem-activesupportRed HatDoS in SnakeYAML6.5 Mediumrubygem-activesupportRed HatDoS in SnakeYAML6.5 Mediumrubygem-activesupportRed HatDoS in SnakeYAML6.5 Mediumrubygem-activesupportRed HatDenial of Service (DoS)7.5 Highrubygem-activesupportRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highrubygem-activesupportRed HatActive Record RCE bug with Serialized Columns9.8 Critical- Show moreLoading…