Rails Https://github.com/rails/rails vulnerabilities

• rails https://github.com/rails/rails, rubyonrails rails +1 more ReDoS based DoS vulnerability in Action Dispatch CVE-2023-22792 Fix available 7.5 HighJanuary 18, 2023
• activesupport project activesupport, rails https://github.com/rails/rails +1 more ReDoS based DoS vulnerability in Active Support's underscore CVE-2023-22796 Fix available 7.5 HighJanuary 18, 2023
• rubyonrails rails, actionpack project actionpack, rails https://github.com/rails/rails +2 more Open Redirect Vulnerability in Action Pack CVE-2023-22797 Fix available 6.1 MediumJanuary 18, 2023
• activerecord project activerecord, rails https://github.com/rails/rails +1 more Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter CVE-2022-44566 Fix available 7.5 HighJanuary 18, 2023
• debian linux, rails https://github.com/rails/rails, rubyonrails rails +2 more ReDoS based DoS vulnerability in Action Dispatch CVE-2023-22795 Fix available 7.5 HighJanuary 18, 2023
• activerecord project activerecord, rails https://github.com/rails/rails +1 more SQL Injection Vulnerability via ActiveRecord comments CVE-2023-22794 Fix available 8.8 HighJanuary 18, 2023
• activerecord project activerecord, rails https://github.com/rails/rails +1 more Active Record RCE bug with Serialized Columns CVE-2022-32224 Public exploitFix available 9.8 CriticalJuly 12, 2022
• debian linux, rails https://github.com/rails/rails, rubyonrails actionpack +2 more XSS Vulnerability in Action View tag helpers CVE-2022-27777 Fix available 6.1 MediumApril 27, 2022
• debian linux, rails https://github.com/rails/rails, rubyonrails actionpack +2 more Cross-site Scripting Vulnerability in Action Pack CVE-2022-22577 Fix available 6.1 MediumApril 27, 2022
• rubyonrails active storage, debian linux, rails https://github.com/rails/rails +2 more Possible code injection vulnerability in Rails / Active Storage CVE-2022-21831 Public exploitFix available 9.8 CriticalMarch 8, 2022
• rails https://github.com/rails/rails, rubyonrails rails +1 more actionpack Open Redirect in Host Authorization Middleware CVE-2021-44528 Fix available 6.1 MediumDecember 14, 2021
• rails https://github.com/rails/rails, rubyonrails rails +1 more Open Redirect in ActionPack CVE-2021-22942 Fix available 6.1 MediumAugust 26, 2021
• rails https://github.com/rails/rails, rubyonrails rails +1 more Possible DoS Vulnerability in Action Controller Token Authentication CVE-2021-22904 Fix available 7.5 HighMay 5, 2021
• debian linux, rails https://github.com/rails/rails, rubyonrails actionpack page-caching +1 more +3 more Action Pack contains Information Disclosure / Unintended Method Execution vulnerability CVE-2021-22885 Fix available 7.5 HighMay 5, 2021
• rails https://github.com/rails/rails, rubyonrails rails +1 more Possible Open Redirect Vulnerability in Action Pack CVE-2021-22903 Fix available 6.1 MediumMay 5, 2021
• rubyonrails rails, rails https://github.com/rails/rails +1 more Denial of Service in Action Dispatch CVE-2021-22902 Fix available 7.5 HighMay 5, 2021
• fedoraproject fedora, rails https://github.com/rails/rails, rubyonrails rails +2 more Actionpack Open Redirect Vulnerability CVE-2021-22881 Fix available EPSS 87.3% 6.1 MediumFebruary 11, 2021
• rubyonrails rails, fedoraproject fedora, rails https://github.com/rails/rails +2 more Active Record subject to Regular Expression Denial-of-Service (ReDoS) CVE-2021-22880 Public exploitFix available 7.5 HighFebruary 11, 2021
• rails https://github.com/rails/rails, rubyonrails rails +1 more Cross-site scripting in actionpack CVE-2020-8264 Fix available EPSS 67.0% 6.1 MediumJanuary 6, 2021
• rubyonrails rails, debian linux, rails https://github.com/rails/rails +2 more Remote code execution via user-provided local names in ActionView CVE-2020-8163 Public exploitFix available EPSS 82.5% 8.8 HighJuly 2, 2020
• rubyonrails rails, fedoraproject fedora, rails https://github.com/rails/rails +2 more Untrusted users can run pending migrations in production in Rails CVE-2020-8185 Fix available 6.5 MediumJune 24, 2020
• rubyonrails rails, debian linux, rails https://github.com/rails/rails +2 more Ability to forge per-form CSRF tokens in Rails CVE-2020-8166 Fix available 4.3 MediumMay 26, 2020
• rubyonrails rails, debian linux, rails https://github.com/rails/rails +2 more Circumvention of file size limits in ActiveStorage CVE-2020-8162 Public exploitFix available 7.5 HighMay 26, 2020
• rubyonrails rails, debian linux, opensuse backports sle +2 more +4 more Possible Strong Parameters Bypass in ActionPack CVE-2020-8164 Fix available 7.5 HighMay 26, 2020
• rubyonrails rails, debian linux, opensuse leap +1 more +3 more ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore CVE-2020-8165 Public exploitFix available EPSS 45.7% 9.8 CriticalMay 26, 2020
• rubyonrails rails, debian linux, fedoraproject fedora +1 more +3 more Use of Insufficiently Random Values in Railties Allows Remote Code Execution CVE-2019-5420 Public exploitFix available EPSS 89.3% 9.8 CriticalMarch 13, 2019
• debian linux, fedoraproject fedora, opensuse leap +5 more +7 more Path Traversal in Action View CVE-2019-5418 In KEVPublic exploitFix available EPSS 98.5% 7.5 HighMarch 13, 2019
• rubyonrails rails, debian linux, fedoraproject fedora +4 more +6 more Denial of Service Vulnerability in Action View CVE-2019-5419 Fix available 7.5 HighMarch 13, 2019
• rails https://github.com/rails/rails, rubyonrails rails +1 more Exposure of Sensitive Information to an Unauthorized Actor in activestorage CVE-2018-16477 Fix available 6.5 MediumNovember 30, 2018
• rails https://github.com/rails/rails, redhat cloudforms, rubyonrails rails +2 more Improper Access Control in activejob CVE-2018-16476 Fix available 7.5 HighNovember 30, 2018