carrierwave vulnerabilities (RubyGems)

5 vulnerabilities.

• carrierwave RubyGems CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters CVE-2026-44587 Fix available 4.7 MediumMay 27, 2026
• carrierwave RubyGems CarrierWave's Content-Type allowlist bypass vulnerability which possibly leads to XSS remained CVE-2024-29034 Fix available 6.8 MediumMarch 24, 2024
• carrierwave RubyGems CarrierWave has a content-type allowlist bypass vulnerability, possibly leading to XSS CVE-2023-49090 Fix available 6.8 MediumNovember 29, 2023
• carrierwave RubyGems Code Injection vulnerability in CarrierWave CVE-2021-21305 Fix available EPSS 13.2% 7.4 HighFebruary 8, 2021
• carrierwave RubyGems Server-side request forgery in CarrierWave CVE-2021-21288 Fix available 4.3 MediumFebruary 8, 2021