rails Rails Vulnerabilities
Rails Rails vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Active Storage Vulnerability in Rails Affects Image Upload Security
CVE-2026-66066RailsRails📈💰👾🟡📰9.5CRITICALUnescaped ANSI Sequences Vulnerability in Active Record by Rails
CVE-2025-55193RailsRails2.7LOWDOM-based Cross-Site Scripting in Rails Framework Affecting Rails-ujs
CVE-2023-23913RailsRails-ujsPossible XSS vulnerability in Rails::HTML::Sanitizer
CVE-2024-53985RailsRails-html-sanitizer6.1MEDIUMPossible XSS Vulnerability in Rails HTML Sanitizer
CVE-2024-53987RailsRails-html-sanitizer6.1MEDIUMPossible XSS Vulnerability in Rails HTML Sanitizer
CVE-2024-53986RailsRails-html-sanitizer6.1MEDIUMPossible XSS Vulnerability in Rails::HTML::Sanitizer 1.6.0
CVE-2024-53988RailsRails-html-sanitizer6.1MEDIUMPossible XSS Vulnerability in Rails HTML Sanitizer
CVE-2024-53989RailsRails-html-sanitizer6.1MEDIUMPossible ReDoS Vulnerability in Action Mailer's Block Format Helper
CVE-2024-47889RailsRailsPossible DoS Vulnerability in Action Controller's HTTP Token Authentication
CVE-2024-47887RailsRailsPossible DoS Vulnerability in Action Dispatch Due to Insufficient Filtering of Query Parameters
CVE-2024-41128RailsRailsAction Pack Fixes Permissions-Policy Vulnerability
CVE-2024-28103RailsRails9.8CRITICALPossible Sensitive Session Information Leak in Active Storage
CVE-2024-26144RailsRails5.3MEDIUMPossible XSS Vulnerability in Rails' Translation Helpers
CVE-2024-26143RailsRails6.1MEDIUMPossible ReDoS Vulnerability in Rails Accept Header Parsing
CVE-2024-26142RailsRails7.5HIGHRemote Code Execution Vulnerability in rails-routes-to-json by Omnitaint
CVE-2023-27849Rails-routes-to-j...Rails-routes-to-json9.8CRITICALrails-cv-app uploaded_files_controller.rb path traversal
CVE-2014-125033Rails-cv-app ProjectRails-cv-app3.5LOWrails-html-sanitizer contains an incomplete fix for an XSS vulnerability
CVE-2022-23520RailsRails-html-sanitizer6.1MEDIUMPossible XSS vulnerability with certain configurations of rails-html-sanitizer
CVE-2022-23519RailsRails-html-sanitizer7.2HIGHImproper neutralization of data URIs allows XSS in rails-html-sanitizer
CVE-2022-23518RailsRails-html-sanitizer6.1MEDIUMInefficient Regular Expression Complexity in rails-html-sanitizer
CVE-2022-23517RailsRails-html-sanitizer7.5HIGHExposure of sensitive information in Action Pack
CVE-2022-23633RailsRails7.4HIGHCross-Site Scripting Vulnerability in RailsAdmin by Sferik
CVE-2020-36190Rails Admin ProjectRails Admin6.1MEDIUMPadding Oracle Vulnerability in Ruby on Rails 2.3 by Ruby
CVE-2010-3299RailsRails6.5MEDIUMCross-Site Scripting in Ruby's rails-html-sanitizer by Ruby on Rails
CVE-2018-3741RailsRails-html-sanitizer6.1MEDIUM