actionpack (RubyGems)
Advisories
175
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 8.1.2.1 or later clears every advisory below that has a fix.
Upgrade commands
bundler
bundle update actionpack # Gemfile: gem "actionpack", ">= 8.1.2.1"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-pgm4-439c-5jp6 Rails has a possible XSS vulnerability in its Action Pack debug exceptions |
Medium EPSS 0.26% |
>= 8.1.0, < 8.1.2.1 | 8.1.2.1 |
| GHSA-vfm5-rmrh-j26v Possible Content Security Policy bypass in Action Dispatch |
Low EPSS 1.00% |
>= 8.0.0, < 8.0.0.1 | 8.0.0.1 |
| GHSA-vfm5-rmrh-j26v Possible Content Security Policy bypass in Action Dispatch |
Low EPSS 1.00% |
>= 5.2.0, < 7.0.8.7 | 7.0.8.7 |
| GHSA-vfm5-rmrh-j26v Possible Content Security Policy bypass in Action Dispatch |
Low EPSS 1.00% |
>= 7.1.0, < 7.1.5.1 | 7.1.5.1 |
| GHSA-vfm5-rmrh-j26v Possible Content Security Policy bypass in Action Dispatch |
Low EPSS 1.00% |
>= 7.2.0, < 7.2.2.1 | 7.2.2.1 |
| GHSA-vfg9-r3fq-jvx4 Possible ReDoS vulnerability in HTTP Token authentication in Action Controller |
Medium EPSS 1.04% |
>= 7.0.0, < 7.0.8.5 | 7.0.8.5 |
| GHSA-vfg9-r3fq-jvx4 Possible ReDoS vulnerability in HTTP Token authentication in Action Controller |
Medium EPSS 1.04% |
>= 7.2.0, < 7.2.1.1 | 7.2.1.1 |
| GHSA-vfg9-r3fq-jvx4 Possible ReDoS vulnerability in HTTP Token authentication in Action Controller |
Medium EPSS 1.04% |
>= 7.1.0, < 7.1.4.1 | 7.1.4.1 |
| GHSA-vfg9-r3fq-jvx4 Possible ReDoS vulnerability in HTTP Token authentication in Action Controller |
Medium EPSS 1.04% |
>= 4.0.0, < 6.1.7.9 | 6.1.7.9 |
| GHSA-x76w-6vjr-8xgj Possible ReDoS vulnerability in query parameter filtering in Action Dispatch |
Medium EPSS 1.09% |
>= 3.1.0, < 6.1.7.9 | 6.1.7.9 |
| GHSA-x76w-6vjr-8xgj Possible ReDoS vulnerability in query parameter filtering in Action Dispatch |
Medium EPSS 1.09% |
>= 7.0.0, < 7.0.8.5 | 7.0.8.5 |
| GHSA-x76w-6vjr-8xgj Possible ReDoS vulnerability in query parameter filtering in Action Dispatch |
Medium EPSS 1.09% |
>= 7.2.0, < 7.2.1.1 | 7.2.1.1 |
| GHSA-x76w-6vjr-8xgj Possible ReDoS vulnerability in query parameter filtering in Action Dispatch |
Medium EPSS 1.09% |
>= 7.1.0, < 7.1.4.1 | 7.1.4.1 |
| GHSA-fwhr-88qx-h9g7 Missing security headers in Action Pack on non-HTML responses |
Critical EPSS 0.66% |
>= 7.1.0, < 7.1.3.4 | 7.1.3.4 |
| GHSA-fwhr-88qx-h9g7 Missing security headers in Action Pack on non-HTML responses |
Critical EPSS 0.66% |
>= 7.2.0.beta1, < 7.2.0.beta2 | 7.2.0.beta2 |
| GHSA-fwhr-88qx-h9g7 Missing security headers in Action Pack on non-HTML responses |
Critical EPSS 0.66% |
>= 7.0.0, < 7.0.8.4 | 7.0.8.4 |
| GHSA-fwhr-88qx-h9g7 Missing security headers in Action Pack on non-HTML responses |
Critical EPSS 0.66% |
>= 6.1.0, < 6.1.7.8 | 6.1.7.8 |
| GHSA-9822-6m93-xqf4 Rails has possible XSS Vulnerability in Action Controller |
Medium EPSS 1.03% |
>= 7.0.0, < 7.0.8.1 | 7.0.8.1 |
| GHSA-9822-6m93-xqf4 Rails has possible XSS Vulnerability in Action Controller |
Medium EPSS 1.03% |
>= 7.1.0, < 7.1.3.1 | 7.1.3.1 |
| GHSA-jjhx-jhvp-74wq Rails has possible ReDoS vulnerability in Accept header parsing in Action Dispatch |
High EPSS 1.50% |
>= 7.1.0, < 7.1.3.1 | 7.1.3.1 |
| GHSA-4g8v-vg43-wpgf Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to |
Medium EPSS 0.33% |
>= 7.0.0, < 7.0.5.1 | 7.0.5.1 |
| GHSA-4g8v-vg43-wpgf Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to |
Medium EPSS 0.33% |
< 6.1.7.4 | 6.1.7.4 |
| GHSA-p84v-45xj-wwqj ReDoS based DoS vulnerability in Action Dispatch |
Low EPSS 1.70% |
>= 3.0.0, < 5.2.8.15 | 5.2.8.15 |
| GHSA-p84v-45xj-wwqj ReDoS based DoS vulnerability in Action Dispatch |
Low EPSS 1.70% |
>= 7.0.0, < 7.0.4.1 | 7.0.4.1 |
| GHSA-p84v-45xj-wwqj ReDoS based DoS vulnerability in Action Dispatch |
Low EPSS 1.70% |
>= 6.0.0, < 6.1.7.1 | 6.1.7.1 |
| GHSA-9445-4cr6-336r Open Redirect Vulnerability in Action Pack |
Medium EPSS 0.60% |
>= 7.0.0, < 7.0.4.1 | 7.0.4.1 |
| GHSA-8xww-x3g3-6jcv ReDoS based DoS vulnerability in Action Dispatch |
Low EPSS 2.28% |
>= 4.0.0.beta1, < 6.1.7.1 | 6.1.7.1 |
| GHSA-8xww-x3g3-6jcv ReDoS based DoS vulnerability in Action Dispatch |
Low EPSS 2.28% |
>= 7.0.0, < 7.0.4.1 | 7.0.4.1 |
| GHSA-9chr-4fjh-5rgw Cross-site Scripting in actionpack Withdrawn |
Low EPSS 0.90% |
<= 7.0.4 | No fix yet |
| GHSA-mm33-5vfq-3mm3 Cross-site Scripting Vulnerability in Action Pack |
Medium EPSS 1.76% |
>= 6.0.0, < 6.0.4.8 | 6.0.4.8 |
| GHSA-mm33-5vfq-3mm3 Cross-site Scripting Vulnerability in Action Pack |
Medium EPSS 1.76% |
>= 6.1.0, < 6.1.5.1 | 6.1.5.1 |
| GHSA-mm33-5vfq-3mm3 Cross-site Scripting Vulnerability in Action Pack |
Medium EPSS 1.76% |
>= 7.0.0, < 7.0.2.4 | 7.0.2.4 |
| GHSA-mm33-5vfq-3mm3 Cross-site Scripting Vulnerability in Action Pack |
Medium EPSS 1.76% |
>= 5.2.0, < 5.2.7.1 | 5.2.7.1 |
| GHSA-q58j-fmvf-9rq6 Cross site scripting in actionpack Rubygem |
Medium EPSS 1.29% |
>= 3.0.0.rc, < 3.0.6 | 3.0.6 |
| GHSA-wh98-p28r-vrc9 Exposure of information in Action Pack |
High EPSS 2.22% |
>= 6.1.0.0, < 6.1.4.6 | 6.1.4.6 |
| GHSA-wh98-p28r-vrc9 Exposure of information in Action Pack |
High EPSS 2.22% |
>= 7.0.0.0, < 7.0.2.2 | 7.0.2.2 |
| GHSA-wh98-p28r-vrc9 Exposure of information in Action Pack |
High EPSS 2.22% |
>= 6.0.0.0, < 6.0.4.6 | 6.0.4.6 |
| GHSA-wh98-p28r-vrc9 Exposure of information in Action Pack |
High EPSS 2.22% |
>= 5.0.0.0, < 5.2.6.2 | 5.2.6.2 |
| GHSA-qphc-hf5q-v8fc actionpack Open Redirect in Host Authorization Middleware |
Medium EPSS 4.42% |
>= 6.1.0, < 6.1.4.2 | 6.1.4.2 |
| GHSA-qphc-hf5q-v8fc actionpack Open Redirect in Host Authorization Middleware |
Medium EPSS 4.42% |
>= 6.0.0, < 6.0.4.2 | 6.0.4.2 |
| GHSA-2rqw-v265-jf8c Open Redirect in ActionPack |
Medium EPSS 1.70% |
>= 6.1.0, < 6.1.4.1 | 6.1.4.1 |
| GHSA-2rqw-v265-jf8c Open Redirect in ActionPack |
Medium EPSS 1.70% |
>= 6.0.0, < 6.0.4.1 | 6.0.4.1 |
| GHSA-7wjx-3g7j-8584 Possible DoS Vulnerability in Action Controller Token Authentication |
High EPSS 4.87% |
>= 4.0.0, < 5.2.4.6 | 5.2.4.6 |
| GHSA-7wjx-3g7j-8584 Possible DoS Vulnerability in Action Controller Token Authentication |
High EPSS 4.87% |
>= 6.0.0, < 6.0.3.7 | 6.0.3.7 |
| GHSA-7wjx-3g7j-8584 Possible DoS Vulnerability in Action Controller Token Authentication |
High EPSS 4.87% |
>= 6.1.0, < 6.1.3.2 | 6.1.3.2 |
| GHSA-7wjx-3g7j-8584 Possible DoS Vulnerability in Action Controller Token Authentication |
High EPSS 4.87% |
>= 5.2.5, < 5.2.6 | 5.2.6 |
| GHSA-hjg4-8q5f-x6fm Action Pack contains Information Disclosure / Unintended Method Execution vulnerability |
High EPSS 4.08% |
>= 5.2.5, < 5.2.6 | 5.2.6 |
| GHSA-hjg4-8q5f-x6fm Action Pack contains Information Disclosure / Unintended Method Execution vulnerability |
High EPSS 4.08% |
>= 6.0.0, < 6.0.3.7 | 6.0.3.7 |
| GHSA-hjg4-8q5f-x6fm Action Pack contains Information Disclosure / Unintended Method Execution vulnerability |
High EPSS 4.08% |
>= 6.1.0, < 6.1.3.2 | 6.1.3.2 |
| GHSA-hjg4-8q5f-x6fm Action Pack contains Information Disclosure / Unintended Method Execution vulnerability |
High EPSS 4.08% |
>= 2.0.0, < 5.2.4.6 | 5.2.4.6 |
| GHSA-5hq2-xf89-9jxq Possible Open Redirect Vulnerability in Action Pack |
Medium EPSS 1.23% |
>= 6.1.0.rc2, < 6.1.3.2 | 6.1.3.2 |
| GHSA-g8ww-46x2-2p65 Denial of Service in Action Dispatch |
High EPSS 2.87% |
>= 6.0.0, < 6.0.3.7 | 6.0.3.7 |
| GHSA-g8ww-46x2-2p65 Denial of Service in Action Dispatch |
High EPSS 2.87% |
>= 6.1.0, < 6.1.3.2 | 6.1.3.2 |
| GHSA-35mm-cc6r-8fjp Cross-site scripting in actionpack |
Medium EPSS 66.99% |
>= 6.0.0, < 6.0.3.4 | 6.0.3.4 |
| GHSA-8877-prq4-9xfw Actionpack Open Redirect Vulnerability |
Medium EPSS 87.30% |
>= 6.0.0, < 6.0.3.5 | 6.0.3.5 |
| GHSA-8877-prq4-9xfw Actionpack Open Redirect Vulnerability |
Medium EPSS 87.30% |
>= 6.1.0, < 6.1.2.1 | 6.1.2.1 |
| GHSA-c6qr-h5vq-59jc Untrusted users can run pending migrations in production in Rails |
Medium EPSS 2.18% |
>= 6.0.0, < 6.0.3.2 | 6.0.3.2 |
| GHSA-jp5v-5gx4-jmj9 Ability to forge per-form CSRF tokens in Rails |
Medium EPSS 1.67% |
>= 5.0.0, < 5.2.4.3 | 5.2.4.3 |
| GHSA-jp5v-5gx4-jmj9 Ability to forge per-form CSRF tokens in Rails |
Medium EPSS 1.67% |
>= 6.0.0, < 6.0.3.1 | 6.0.3.1 |
| GHSA-8727-m6gj-mc37 Possible Strong Parameters Bypass in ActionPack |
High EPSS 4.89% |
>= 6.0.0, < 6.0.3.1 | 6.0.3.1 |
| GHSA-8727-m6gj-mc37 Possible Strong Parameters Bypass in ActionPack |
High EPSS 4.89% |
>= 5.0.0, < 5.2.4.3 | 5.2.4.3 |
| GHSA-vwfg-qj3r-6v3r Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | >= 4.0.0, < 4.1.14.1 | 4.1.14.1 |
| GHSA-vwfg-qj3r-6v3r Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | >= 4.2.0, < 4.2.5.1 | 4.2.5.1 |
| GHSA-vwfg-qj3r-6v3r Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | < 3.2.22.1 | 3.2.22.1 |
| GHSA-m53f-rhq8-q6hf Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | < 3.2.22.1 | 3.2.22.1 |
| GHSA-m53f-rhq8-q6hf Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | >= 4.0.0, < 4.1.14.1 | 4.1.14.1 |
| GHSA-m53f-rhq8-q6hf Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | >= 4.2.0, < 4.2.5.1 | 4.2.5.1 |
| GHSA-5xmj-wm96-fmw8 Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | >= 4.0.0, < 4.0.12 | 4.0.12 |
| GHSA-5xmj-wm96-fmw8 Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | < 3.2.21 | 3.2.21 |
| GHSA-5xmj-wm96-fmw8 Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | >= 4.1.0, < 4.1.8 | 4.1.8 |
| GHSA-23v3-qfrj-wmgh Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | < 3.2.20 | 3.2.20 |
| GHSA-23v3-qfrj-wmgh Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | >= 4.1.0, < 4.1.7 | 4.1.7 |
| GHSA-23v3-qfrj-wmgh Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | >= 4.0.0, < 4.0.11 | 4.0.11 |
| GHSA-qf5x-qgx7-437h Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | >= 4.1.0, < 4.1.1 | 4.1.1 |
| GHSA-qf5x-qgx7-437h Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | < 3.2.18 | 3.2.18 |
| GHSA-qf5x-qgx7-437h Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | >= 4.0.0, < 4.0.5 | 4.0.5 |
| GHSA-544j-77x9-h938 Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | >= 4.2.0, < 4.2.5.1 | 4.2.5.1 |
| GHSA-544j-77x9-h938 Moderate severity vulnerability that affects actionpack Withdrawn |
Medium | >= 4.0.0, < 4.1.14.1 | 4.1.14.1 |
| GHSA-hx46-vwmx-wx95 High severity vulnerability that affects actionpack Withdrawn |
High | >= 4.2.0, < 4.2.5.2 | 4.2.5.2 |
| GHSA-hx46-vwmx-wx95 High severity vulnerability that affects actionpack Withdrawn |
High | >= 3.2.0, < 3.2.22.2 | 3.2.22.2 |
| GHSA-hx46-vwmx-wx95 High severity vulnerability that affects actionpack Withdrawn |
High | >= 4.0.0, < 4.1.14.2 | 4.1.14.2 |
| GHSA-v5jg-558j-q67c actionpack Cross-site Scripting vulnerability |
Medium EPSS 2.49% |
>= 2.0.0, < 2.3.13 | 2.3.13 |
| GHSA-r7q2-5gqg-6c7q actionpack Improper Input Validation vulnerability |
Medium EPSS 1.81% |
>= 3.0.0, < 3.0.10 | 3.0.10 |
| GHSA-v9v4-7jp6-8c73 rails Cross-site Scripting vulnerability |
Medium EPSS 1.96% |
>= 3.0.0, < 3.0.8 | 3.0.8 |
| GHSA-v9v4-7jp6-8c73 rails Cross-site Scripting vulnerability |
Medium EPSS 1.96% |
>= 2.0.0, < 2.3.12 | 2.3.12 |
| GHSA-8qrh-h9m2-5fvf Cross site scripting that affects rails |
Medium EPSS 3.02% |
>= 2.0.0, < 2.2.3 | 2.2.3 |
| GHSA-75w6-p6mg-vh8j Rails actionpack gem vulnerable to Cross-site Scripting |
Medium EPSS 2.35% |
>= 3.0.0, < 3.0.4 | 3.0.4 |
| GHSA-75w6-p6mg-vh8j Rails actionpack gem vulnerable to Cross-site Scripting |
Medium EPSS 2.35% |
< 2.3.11 | 2.3.11 |
| GHSA-q34c-48gc-m9g8 actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request |
Medium EPSS 3.89% |
>= 3.1.0, < 3.1.6 | 3.1.6 |
| GHSA-q34c-48gc-m9g8 actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request |
Medium EPSS 3.89% |
>= 3.2.0, < 3.2.6 | 3.2.6 |
| GHSA-3vfw-7rcp-3xgm actionpack Improper Input Validation vulnerability |
Medium EPSS 6.67% |
>= 2.3.0, < 2.3.13 | 2.3.13 |
| GHSA-4ww3-3rxj-8v6q actionpack allows remote attackers to bypass intended access restrictions |
High EPSS 2.50% |
>= 3.0.0, < 3.0.4 | 3.0.4 |
| GHSA-xxr8-833v-c7wc Cross-site Scripting vulnerability in i18n translations helper method |
Medium EPSS 1.58% |
>= 3.0.0, < 3.0.11 | 3.0.11 |
| GHSA-2xjj-5x6h-8vmf Cross-site Scripting in actionpack |
Medium EPSS 2.39% |
>= 3.0.0, < 3.0.12 | 3.0.12 |
| GHSA-92w9-2pqw-rhjj actionpack Improper Authentication vulnerability |
Medium EPSS 1.89% |
>= 3.1.0, < 3.1.7 | 3.1.7 |
| GHSA-v5jg-558j-q67c actionpack Cross-site Scripting vulnerability |
Medium EPSS 2.49% |
>= 3.0.0, < 3.0.10 | 3.0.10 |
| GHSA-8fqx-7pv4-3jwm Improper Input Validation in actionpack |
Medium EPSS 8.08% |
>= 2.2.0, < 2.2.2 | 2.2.2 |
| GHSA-8fqx-7pv4-3jwm Improper Input Validation in actionpack |
Medium EPSS 8.08% |
>= 2.1.0, < 2.1.3 | 2.1.3 |
| GHSA-fcqf-h4h4-695m actionpack CRLF injection vulnerability |
Medium EPSS 1.75% |
>= 2.3.0, < 2.3.13 | 2.3.13 |
| GHSA-8qrh-h9m2-5fvf Cross site scripting that affects rails |
Medium EPSS 3.02% |
>= 2.3.0, < 2.3.4 | 2.3.4 |
| GHSA-2xjj-5x6h-8vmf Cross-site Scripting in actionpack |
Medium EPSS 2.39% |
>= 3.1.0, < 3.1.4 | 3.1.4 |
| GHSA-2xjj-5x6h-8vmf Cross-site Scripting in actionpack |
Medium EPSS 2.39% |
>= 3.2.0, < 3.2.2 | 3.2.2 |
| GHSA-fg9w-g6m4-557j actionpack and activesupport vulnerable to information leaks |
Medium EPSS 2.23% |
>= 2.1.0, < 2.2.3 | 2.2.3 |
| GHSA-fg9w-g6m4-557j actionpack and activesupport vulnerable to information leaks |
Medium EPSS 2.23% |
>= 2.3.0, < 2.3.4 | 2.3.4 |
| GHSA-24fg-p96v-hxh8 actionpack Cross-Site Request Forgery vulnerability |
Medium EPSS 1.42% |
>= 2.1.0, < 2.3.11 | 2.3.11 |
| GHSA-92w9-2pqw-rhjj actionpack Improper Authentication vulnerability |
Medium EPSS 1.89% |
< 2.3.5 | 2.3.5 |
| GHSA-92w9-2pqw-rhjj actionpack Improper Authentication vulnerability |
Medium EPSS 1.89% |
>= 3.2.0, < 3.2.7 | 3.2.7 |
| GHSA-q34c-48gc-m9g8 actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request |
Medium EPSS 3.89% |
>= 3.0.13, < 3.0.14 | 3.0.14 |
| GHSA-hgpp-pp89-4fgf Action Pack contains database-query restrictions bypass |
Medium EPSS 4.55% |
>= 3.0.0.beta, < 3.0.13 | 3.0.13 |
| GHSA-hgpp-pp89-4fgf Action Pack contains database-query restrictions bypass |
Medium EPSS 4.55% |
>= 3.1.0, < 3.1.5 | 3.1.5 |
| GHSA-92w9-2pqw-rhjj actionpack Improper Authentication vulnerability |
Medium EPSS 1.89% |
>= 3.0.0.beta, < 3.0.16 | 3.0.16 |
| GHSA-hgpp-pp89-4fgf Action Pack contains database-query restrictions bypass |
Medium EPSS 4.55% |
>= 3.2.0, < 3.2.4 | 3.2.4 |
| GHSA-hgpp-pp89-4fgf Action Pack contains database-query restrictions bypass |
Medium EPSS 4.55% |
< 2.3.16 | 2.3.16 |
| GHSA-24fg-p96v-hxh8 actionpack Cross-Site Request Forgery vulnerability |
Medium EPSS 1.42% |
>= 3.0.0, < 3.0.4 | 3.0.4 |
| GHSA-xxr8-833v-c7wc Cross-site Scripting vulnerability in i18n translations helper method |
Medium EPSS 1.58% |
>= 3.1.0, < 3.1.2 | 3.1.2 |
| GHSA-699m-mcjm-9cw8 actionpack vulnerable to Cross-site Scripting |
Medium EPSS 2.23% |
>= 4.0.0, < 4.0.2 | 4.0.2 |
| GHSA-j838-vfpq-fmf2 actionpack Cross-site Scripting vulnerability |
Medium EPSS 1.85% |
< 2.3.18 | 2.3.18 |
| GHSA-j838-vfpq-fmf2 actionpack Cross-site Scripting vulnerability |
Medium EPSS 1.85% |
>= 3.0.0, < 3.1.12 | 3.1.12 |
| GHSA-j838-vfpq-fmf2 actionpack Cross-site Scripting vulnerability |
Medium EPSS 1.85% |
>= 3.2.0, < 3.2.13 | 3.2.13 |
| GHSA-jmgw-6vjg-jjwg actionpack Improper Input Validation vulnerability |
High EPSS 99.45% |
< 2.3.15 | 2.3.15 |
| GHSA-jmgw-6vjg-jjwg actionpack Improper Input Validation vulnerability |
High EPSS 99.45% |
>= 3.0.0, < 3.0.19 | 3.0.19 |
| GHSA-jmgw-6vjg-jjwg actionpack Improper Input Validation vulnerability |
High EPSS 99.45% |
>= 3.1.0, < 3.1.10 | 3.1.10 |
| GHSA-jmgw-6vjg-jjwg actionpack Improper Input Validation vulnerability |
High EPSS 99.45% |
>= 3.2.0, < 3.2.11 | 3.2.11 |
| GHSA-98mf-8f57-64qf actionpack Cross-site Scripting vulnerability |
Medium EPSS 1.31% |
>= 3.2.0, < 3.2.8 | 3.2.8 |
| GHSA-98mf-8f57-64qf actionpack Cross-site Scripting vulnerability |
Medium EPSS 1.31% |
>= 3.1.0, < 3.1.8 | 3.1.8 |
| GHSA-7g65-ghrg-hpf5 actionpack Cross-site Scripting vulnerability |
Medium EPSS 1.99% |
< 2.3.16 | 2.3.16 |
| GHSA-7g65-ghrg-hpf5 actionpack Cross-site Scripting vulnerability |
Medium EPSS 1.99% |
>= 3.2.0, < 3.2.8 | 3.2.8 |
| GHSA-mpxf-gcw2-pw5q actionpack Improper Input Validation vulnerability |
Medium EPSS 20.70% |
>= 3.0.0, < 3.2.16 | 3.2.16 |
| GHSA-mpxf-gcw2-pw5q actionpack Improper Input Validation vulnerability |
Medium EPSS 20.70% |
>= 4.0.0, < 4.0.2 | 4.0.2 |
| GHSA-7g65-ghrg-hpf5 actionpack Cross-site Scripting vulnerability |
Medium EPSS 1.99% |
>= 3.1.0, < 3.1.8 | 3.1.8 |
| GHSA-7g65-ghrg-hpf5 actionpack Cross-site Scripting vulnerability |
Medium EPSS 1.99% |
>= 3.0.0.beta, < 3.0.17 | 3.0.17 |
| GHSA-q759-hwvc-m3jg actionpack Cross-site Scripting vulnerability |
Medium EPSS 2.63% |
< 2.3.18 | 2.3.18 |
| GHSA-q759-hwvc-m3jg actionpack Cross-site Scripting vulnerability |
Medium EPSS 2.63% |
>= 3.0.0, < 3.1.12 | 3.1.12 |
| GHSA-q759-hwvc-m3jg actionpack Cross-site Scripting vulnerability |
Medium EPSS 2.63% |
>= 3.2.0, < 3.2.13 | 3.2.13 |
| GHSA-699m-mcjm-9cw8 actionpack vulnerable to Cross-site Scripting |
Medium EPSS 2.23% |
>= 3.0.0, < 3.2.16 | 3.2.16 |
| GHSA-98mf-8f57-64qf actionpack Cross-site Scripting vulnerability |
Medium EPSS 1.31% |
>= 3.0, < 3.0.17 | 3.0.17 |
| GHSA-6h5q-96hp-9jgm actionpack vulnerable to Cross-site Scripting |
Medium EPSS 3.17% |
>= 3.0.0, < 3.2.16 | 3.2.16 |
| GHSA-wpw7-wxjm-cw8r actionpack allows bypass of database-query restrictions |
Medium EPSS 2.37% |
>= 3.0.0, < 3.2.16 | 3.2.16 |
| GHSA-wpw7-wxjm-cw8r actionpack allows bypass of database-query restrictions |
Medium EPSS 2.37% |
>= 4.0.0, < 4.0.2 | 4.0.2 |
| GHSA-h56m-vwxc-3qpw Directory traversal vulnerability in actionpack |
Medium EPSS 4.16% |
>= 4.0.0, < 4.0.12 | 4.0.12 |
| GHSA-h56m-vwxc-3qpw Directory traversal vulnerability in actionpack |
Medium EPSS 4.16% |
>= 3.0.0, < 3.2.21 | 3.2.21 |
| GHSA-29gr-w57f-rpfw actionpack vulnerable to Path Traversal |
Medium EPSS 3.46% |
>= 3.0.0, < 3.2.20 | 3.2.20 |
| GHSA-h56m-vwxc-3qpw Directory traversal vulnerability in actionpack |
Medium EPSS 4.16% |
>= 4.1.0, < 4.1.8 | 4.1.8 |
| GHSA-9h6g-gp95-x3q5 actionpack is vulnerable to denial of service because of a wildcard controller route |
High EPSS 6.71% |
>= 4.0.0, < 4.2.5.1 | 4.2.5.1 |
| GHSA-6x85-j5j2-27jx actionpack Path Traversal vulnerability Known exploited |
High EPSS 53.70% |
>= 4.1.0, < 4.1.1 | 4.1.1 |
| GHSA-6x85-j5j2-27jx actionpack Path Traversal vulnerability Known exploited |
High EPSS 53.70% |
>= 4.0.0, < 4.0.5 | 4.0.5 |
| GHSA-6x85-j5j2-27jx actionpack Path Traversal vulnerability Known exploited |
High EPSS 53.70% |
>= 3.0.0, < 3.2.18 | 3.2.18 |
| GHSA-6x85-j5j2-27jx actionpack Path Traversal vulnerability Known exploited |
High EPSS 53.70% |
>= 4.1.0, < 4.1.1 | 4.1.1 |
| GHSA-6x85-j5j2-27jx actionpack Path Traversal vulnerability Known exploited |
High EPSS 53.70% |
>= 4.0.0, < 4.0.5 | 4.0.5 |
| GHSA-6x85-j5j2-27jx actionpack Path Traversal vulnerability Known exploited |
High EPSS 53.70% |
>= 3.0.0, < 3.2.18 | 3.2.18 |
| GHSA-6h5q-96hp-9jgm actionpack vulnerable to Cross-site Scripting |
Medium EPSS 3.17% |
>= 4.0.0, < 4.0.2 | 4.0.2 |
| GHSA-p692-7mm3-3fxg actionpack is vulnerable to remote bypass authentication |
Low EPSS 4.88% |
>= 4.0.0, < 4.1.14.1 | 4.1.14.1 |
| GHSA-p692-7mm3-3fxg actionpack is vulnerable to remote bypass authentication |
Low EPSS 4.88% |
>= 3.1.0, < 3.2.22.1 | 3.2.22.1 |
| GHSA-m46p-ggm5-5j83 Rails vulnerable to Cross-site Scripting |
Medium EPSS 4.03% |
>= 4.0.0, < 4.0.3 | 4.0.3 |
| GHSA-m46p-ggm5-5j83 Rails vulnerable to Cross-site Scripting |
Medium EPSS 4.03% |
>= 3.0.0, < 3.2.17 | 3.2.17 |
| GHSA-7cgp-c3g7-qvrw actionpack Improper Input Validation vulnerability |
Medium EPSS 6.19% |
>= 3.0.0, < 3.2.17 | 3.2.17 |
| GHSA-w37c-q653-qg95 actionpack Cross-site Scripting vulnerability |
Medium EPSS 1.96% |
>= 4.0.0, < 4.0.2 | 4.0.2 |
| GHSA-h56m-vwxc-3qpw Directory traversal vulnerability in actionpack |
Medium EPSS 4.16% |
>= 4.2.0.beta1, < 4.2.0.beta4 | 4.2.0.beta4 |
| GHSA-29gr-w57f-rpfw actionpack vulnerable to Path Traversal |
Medium EPSS 3.46% |
>= 4.2.0.beta1, < 4.2.0.beta3 | 4.2.0.beta3 |
| GHSA-29gr-w57f-rpfw actionpack vulnerable to Path Traversal |
Medium EPSS 3.46% |
>= 4.1.0, < 4.1.7 | 4.1.7 |
| GHSA-29gr-w57f-rpfw actionpack vulnerable to Path Traversal |
Medium EPSS 3.46% |
>= 4.0.0, < 4.0.11 | 4.0.11 |
| GHSA-78rc-8c29-p45g actionpack allows remote code execution via application's unrestricted use of render method |
High EPSS 81.45% |
>= 3.0.0, < 3.2.22.2 | 3.2.22.2 |
| GHSA-xrr4-p6fq-hjg7 Directory traversal vulnerability in Action View in Ruby on Rails Known exploited |
High EPSS 95.54% |
< 3.2.22.1 | 3.2.22.1 |
| GHSA-ffpv-c4hm-3x6v actionpack is vulnerable to denial of service via a crafted HTTP Accept header |
High EPSS 9.73% |
>= 4.0.0, < 4.1.14.1 | 4.1.14.1 |
| GHSA-78rc-8c29-p45g actionpack allows remote code execution via application's unrestricted use of render method |
High EPSS 81.45% |
>= 4.0.0, < 4.1.14.2 | 4.1.14.2 |
| GHSA-78rc-8c29-p45g actionpack allows remote code execution via application's unrestricted use of render method |
High EPSS 81.45% |
>= 4.2.0, < 4.2.5.2 | 4.2.5.2 |
| GHSA-xrr4-p6fq-hjg7 Directory traversal vulnerability in Action View in Ruby on Rails Known exploited |
High EPSS 95.54% |
>= 4.2.0, <= 4.2.5.0 | No fix yet |
| GHSA-ffpv-c4hm-3x6v actionpack is vulnerable to denial of service via a crafted HTTP Accept header |
High EPSS 9.73% |
>= 4.2.0, < 4.2.5.1 | 4.2.5.1 |
| GHSA-xrr4-p6fq-hjg7 Directory traversal vulnerability in Action View in Ruby on Rails Known exploited |
High EPSS 95.54% |
>= 4.0.0, <= 4.1.14.0 | No fix yet |
| GHSA-xrr4-p6fq-hjg7 Directory traversal vulnerability in Action View in Ruby on Rails Known exploited |
High EPSS 95.54% |
>= 4.0.0, < 4.1.14.1 | 4.1.14.1 |
| GHSA-xrr4-p6fq-hjg7 Directory traversal vulnerability in Action View in Ruby on Rails Known exploited |
High EPSS 95.54% |
>= 4.2.0, < 4.2.5.1 | 4.2.5.1 |
| GHSA-vx9j-46rh-fqr8 actionview contains Path Traversal vulnerability |
Medium EPSS 4.42% |
>= 3.0.0, < 3.2.22.2 | 3.2.22.2 |
| GHSA-vx9j-46rh-fqr8 actionview contains Path Traversal vulnerability |
Medium EPSS 4.42% |
>= 4.0.0, < 4.1.14.2 | 4.1.14.2 |
| GHSA-xrr4-p6fq-hjg7 Directory traversal vulnerability in Action View in Ruby on Rails Known exploited |
High EPSS 95.54% |
< 3.2.22.1 | 3.2.22.1 |
| GHSA-ffpv-c4hm-3x6v actionpack is vulnerable to denial of service via a crafted HTTP Accept header |
High EPSS 9.73% |
< 3.2.22.1 | 3.2.22.1 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor