MEDIUMRubyGems
GHSA-24fg-p96v-hxh8· CVE-2011-0447actionpack Cross-Site Request Forgery vulnerability
Modified: 12/7/2024
package
RubyGems/actionpack
pkg:rubygems/actionpack
MEDIUMRubyGems
GHSA-29gr-w57f-rpfw· CVE-2014-7818actionpack vulnerable to Path Traversal
Modified: 11/29/2024
MEDIUM6.1RubyGems
GHSA-2rqw-v265-jf8c· CVE-2021-22942Open Redirect in ActionPack
Modified: 2/21/2024
MEDIUMRubyGems
GHSA-2xjj-5x6h-8vmf· CVE-2012-1099Cross-site Scripting in actionpack
Modified: 11/29/2024
MEDIUM6.1RubyGems
GHSA-35mm-cc6r-8fjp· CVE-2020-8264Cross-site scripting in actionpack
Modified: 2/16/2024
MEDIUMRubyGems
GHSA-3vfw-7rcp-3xgm· CVE-2011-3187actionpack Improper Input Validation vulnerability
Modified: 11/29/2024
MEDIUM4.0RubyGems
GHSA-4g8v-vg43-wpgf· CVE-2023-28362Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to
Modified: 5/5/2025
HIGHRubyGems
GHSA-4ww3-3rxj-8v6q· CVE-2011-0449actionpack allows remote attackers to bypass intended access restrictions
Modified: 11/29/2024
MEDIUM6.1RubyGems
GHSA-5hq2-xf89-9jxq· CVE-2021-22903Possible Open Redirect Vulnerability in Action Pack
Modified: 2/16/2024
MEDIUMRubyGems
GHSA-699m-mcjm-9cw8· CVE-2013-4491actionpack vulnerable to Cross-site Scripting
Modified: 11/29/2024
MEDIUMRubyGems
GHSA-6h5q-96hp-9jgm· CVE-2013-6415actionpack vulnerable to Cross-site Scripting
Modified: 11/29/2024
HIGH7.5RubyGems
GHSA-6x85-j5j2-27jx· CVE-2014-0130actionpack Path Traversal vulnerability
Modified: 10/24/2025
MEDIUMRubyGems
GHSA-75w6-p6mg-vh8j· CVE-2011-0446Rails actionpack gem vulnerable to Cross-site Scripting
Modified: 11/28/2024
HIGH7.3RubyGems
GHSA-78rc-8c29-p45g· CVE-2016-2098actionpack allows remote code execution via application's unrestricted use of render method
Modified: 2/20/2024
MEDIUMRubyGems
GHSA-7cgp-c3g7-qvrw· CVE-2014-0082actionpack Improper Input Validation vulnerability
Modified: 12/2/2024
MEDIUMRubyGems
GHSA-7g65-ghrg-hpf5· CVE-2012-3465actionpack Cross-site Scripting vulnerability
Modified: 1/21/2025
HIGH7.5RubyGems
GHSA-7wjx-3g7j-8584· CVE-2021-22904Possible DoS Vulnerability in Action Controller Token Authentication
Modified: 2/16/2024
HIGH7.5RubyGems
GHSA-8727-m6gj-mc37· CVE-2020-8164Possible Strong Parameters Bypass in ActionPack
Modified: 2/16/2024
MEDIUM6.1RubyGems
GHSA-8877-prq4-9xfw· CVE-2021-22881Actionpack Open Redirect Vulnerability
Modified: 2/20/2024
MEDIUMRubyGems
GHSA-8fqx-7pv4-3jwm· CVE-2008-7248Improper Input Validation in actionpack
Modified: 12/7/2024
MEDIUMRubyGems
GHSA-8qrh-h9m2-5fvf· CVE-2009-3009Cross site scripting that affects rails
Modified: 4/9/2025
LOWRubyGems
GHSA-8xww-x3g3-6jcv· CVE-2023-22795ReDoS based DoS vulnerability in Action Dispatch
Modified: 3/31/2025
MEDIUMRubyGems
GHSA-92w9-2pqw-rhjj· CVE-2012-3424actionpack Improper Authentication vulnerability
Modified: 1/22/2025
MEDIUM6.1RubyGems
GHSA-9445-4cr6-336r· CVE-2023-22797Open Redirect Vulnerability in Action Pack
Modified: 2/16/2024
MEDIUM6.1RubyGems
GHSA-9822-6m93-xqf4· BIT-rails-2024-26143, CVE-2024-26143Rails has possible XSS Vulnerability in Action Controller
Modified: 6/8/2026
MEDIUMRubyGems
GHSA-98mf-8f57-64qf· CVE-2012-3463actionpack Cross-site Scripting vulnerability
Modified: 11/30/2024
HIGH7.5RubyGems
GHSA-9h6g-gp95-x3q5· CVE-2015-7581actionpack is vulnerable to denial of service because of a wildcard controller route
Modified: 11/29/2024
MEDIUM6.5RubyGems
GHSA-c6qr-h5vq-59jc· CVE-2020-8185Untrusted users can run pending migrations in production in Rails
Modified: 2/22/2024
MEDIUMRubyGems
GHSA-fcqf-h4h4-695m· CVE-2011-3186actionpack CRLF injection vulnerability
Modified: 12/5/2024
HIGH7.5RubyGems
GHSA-ffpv-c4hm-3x6v· CVE-2016-0751actionpack is vulnerable to denial of service via a crafted HTTP Accept header
Modified: 11/29/2024
MEDIUMRubyGems
GHSA-fg9w-g6m4-557j· CVE-2009-3086actionpack and activesupport vulnerable to information leaks
Modified: 11/28/2024
MEDIUM5.4RubyGems
GHSA-fwhr-88qx-h9g7· BIT-rails-2024-28103, CVE-2024-28103Missing security headers in Action Pack on non-HTML responses
Modified: 9/10/2026
HIGH7.5RubyGems
GHSA-g8ww-46x2-2p65· CVE-2021-22902Denial of Service in Action Dispatch
Modified: 2/16/2024
MEDIUMRubyGems
GHSA-h56m-vwxc-3qpw· CVE-2014-7829Directory traversal vulnerability in actionpack
Modified: 11/29/2024
MEDIUMRubyGems
GHSA-hgpp-pp89-4fgf· CVE-2012-2660Action Pack contains database-query restrictions bypass
Modified: 1/22/2025
HIGH7.5RubyGems
GHSA-hjg4-8q5f-x6fm· CVE-2021-22885Action Pack contains Information Disclosure / Unintended Method Execution vulnerability
Modified: 2/22/2024
MEDIUMRubyGems
GHSA-j838-vfpq-fmf2· CVE-2013-1857actionpack Cross-site Scripting vulnerability
Modified: 11/30/2024
LOWRubyGems
GHSA-jjhx-jhvp-74wq· BIT-rails-2024-26142, CVE-2024-26142Rails has possible ReDoS vulnerability in Accept header parsing in Action Dispatch
Modified: 9/10/2026
HIGHRubyGems
GHSA-jmgw-6vjg-jjwg· CVE-2013-0156actionpack Improper Input Validation vulnerability
Modified: 11/30/2024
MEDIUM4.3RubyGems
GHSA-jp5v-5gx4-jmj9· CVE-2020-8166Ability to forge per-form CSRF tokens in Rails
Modified: 5/5/2026
MEDIUMRubyGems
GHSA-m46p-ggm5-5j83· CVE-2014-0081Rails vulnerable to Cross-site Scripting
Modified: 12/8/2024
MEDIUM6.1RubyGems
GHSA-mm33-5vfq-3mm3· CVE-2022-22577Cross-site Scripting Vulnerability in Action Pack
Modified: 2/18/2024
MEDIUMRubyGems
GHSA-mpxf-gcw2-pw5q· CVE-2013-6414actionpack Improper Input Validation vulnerability
Modified: 11/29/2024
LOW3.7RubyGems
GHSA-p692-7mm3-3fxg· CVE-2015-7576actionpack is vulnerable to remote bypass authentication
Modified: 11/29/2024
LOWRubyGems
GHSA-p84v-45xj-wwqj· CVE-2023-22792ReDoS based DoS vulnerability in Action Dispatch
Modified: 2/18/2025
LOWRubyGems
GHSA-pgm4-439c-5jp6· CVE-2026-33167Rails has a possible XSS vulnerability in its Action Pack debug exceptions
Modified: 9/10/2026
MEDIUMRubyGems
GHSA-q34c-48gc-m9g8· CVE-2012-2694actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request
Modified: 1/20/2025
MEDIUM6.1RubyGems
GHSA-q58j-fmvf-9rq6· CVE-2011-1497Cross site scripting in actionpack Rubygem
Modified: 1/20/2025
MEDIUMRubyGems
GHSA-q759-hwvc-m3jg· CVE-2013-1855actionpack Cross-site Scripting vulnerability
Modified: 11/29/2024
MEDIUM6.1RubyGems
GHSA-qphc-hf5q-v8fc· BIT-rails-2021-44528, CVE-2021-44528actionpack Open Redirect in Host Authorization Middleware
Modified: 3/6/2024
MEDIUMRubyGems
GHSA-r7q2-5gqg-6c7q· CVE-2011-2929actionpack Improper Input Validation vulnerability
Modified: 11/29/2024
MEDIUMRubyGems
GHSA-v5jg-558j-q67c· CVE-2011-2931actionpack Cross-site Scripting vulnerability
Modified: 11/29/2024
MEDIUMRubyGems
GHSA-v9v4-7jp6-8c73· CVE-2011-2197rails Cross-site Scripting vulnerability
Modified: 12/7/2024
MEDIUMRubyGems
GHSA-vfg9-r3fq-jvx4· BIT-rails-2024-47887, CVE-2024-47887Possible ReDoS vulnerability in HTTP Token authentication in Action Controller
Modified: 10/31/2024
LOWRubyGems
GHSA-vfm5-rmrh-j26v· BIT-rails-2024-54133, CVE-2024-54133Possible Content Security Policy bypass in Action Dispatch
Modified: 3/7/2025
MEDIUM5.3RubyGems
GHSA-vx9j-46rh-fqr8· CVE-2016-2097actionview contains Path Traversal vulnerability
Modified: 2/22/2024
MEDIUMRubyGems
GHSA-w37c-q653-qg95· CVE-2013-6416actionpack Cross-site Scripting vulnerability
Modified: 12/3/2024
HIGH7.4RubyGems
GHSA-wh98-p28r-vrc9· CVE-2022-23633Exposure of information in Action Pack
Modified: 2/4/2026
MEDIUMRubyGems
GHSA-wpw7-wxjm-cw8r· CVE-2013-6417actionpack allows bypass of database-query restrictions
Modified: 11/29/2024
MEDIUMRubyGems
GHSA-x76w-6vjr-8xgj· BIT-rails-2024-41128, CVE-2024-41128Possible ReDoS vulnerability in query parameter filtering in Action Dispatch
Modified: 10/31/2024
HIGH7.5RubyGems
GHSA-xrr4-p6fq-hjg7· CVE-2016-0752Directory traversal vulnerability in Action View in Ruby on Rails
Modified: 10/22/2025
MEDIUMRubyGems
GHSA-xxr8-833v-c7wc· CVE-2011-4319Cross-site Scripting vulnerability in i18n translations helper method
Modified: 12/7/2024