MEDIUMRubyGems
GHSA-3crr-9vmg-864v· CVE-2013-1854Active Record Improper Input Validation
Modified: 11/29/2024
package
RubyGems/activerecord
pkg:rubygems/activerecord
CRITICAL9.8RubyGems
GHSA-3hhc-qp5v-9p2j· CVE-2022-32224Active Record RCE bug with Serialized Columns
Modified: 7/8/2026
HIGH7.5RubyGems
GHSA-579w-22j4-4749· CVE-2022-44566Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
Modified: 2/3/2026
MEDIUMRubyGems
GHSA-76r7-hhxj-r776· CVE-2025-55193Active Record logging vulnerable to ANSI escape injection
Modified: 9/10/2026
HIGHRubyGems
GHSA-76wq-xw4h-f8wj· CVE-2012-2695activerecord vulnerable to SQL Injection
Modified: 1/21/2025
HIGH7.5RubyGems
GHSA-8hc4-xxm3-5ppp· CVE-2021-22880Active Record subject to Regular Expression Denial-of-Service (ReDoS)
Modified: 2/20/2024
HIGHRubyGems
GHSA-9rf5-jm6f-2fmm· CVE-2014-3514Active Record subject to strong parameters protection bypass
Modified: 11/29/2024
CRITICALRubyGems
GHSA-f57c-hx33-hvh8· CVE-2013-3221Active Record component in Ruby on Rails has a data-type injection vulnerability
Modified: 2/3/2026
MEDIUMRubyGems
GHSA-fh39-v733-mxfr· CVE-2012-2661Active Record vulnerable to SQL Injection via nested query parameters
Modified: 12/5/2024
CRITICALRubyGems
GHSA-fhj9-cjjh-27vm· CVE-2013-0277Active Record contains deserialization of arbitrary YAML
Modified: 12/3/2024
HIGHRubyGems
GHSA-gh2w-j7cx-2664· CVE-2012-6496Active Record contains SQL Injection
Modified: 1/21/2025
MEDIUMRubyGems
GHSA-gjxw-5w2q-7grf· CVE-2010-3933Rails activerecord gem has Improper Input Validation vulnerability
Modified: 12/7/2024
MEDIUMRubyGems
GHSA-gppp-5xc5-wfpx· CVE-2013-0155Active Record allows bypassing of database-query restrictions
Modified: 11/29/2024
MEDIUMRubyGems
GHSA-gr44-7grc-37vq· CVE-2013-0276ActiveRecord vulnerable to modification of protected model attributes
Modified: 11/29/2024
HIGHRubyGems
GHSA-h6w6-xmqv-7q78· CVE-2011-2930activerecord vulnerable to SQL Injection
Modified: 11/3/2025
HIGH8.8RubyGems
GHSA-hq7p-j377-6v63· CVE-2023-22794SQL Injection Vulnerability via ActiveRecord comments
Modified: 2/21/2024
MEDIUMRubyGems
GHSA-hqf9-rc9j-5fmj· CVE-2014-0080Array data injection vulnerability in activerecord
Modified: 12/8/2024
HIGHRubyGems
GHSA-jmm9-2p29-vh2w· CVE-2011-0448activerecord vulnerable to SQL Injection
Modified: 11/28/2024
HIGHRubyGems
GHSA-mhwp-qhpc-h3jm· CVE-2014-3482SQL Injection in Active Record
Modified: 3/31/2025
HIGH7.5RubyGems
GHSA-pr3r-4wrp-r2pv· CVE-2016-6317ActiveRecord in Ruby on Rails allows database-query bypass
Modified: 2/20/2024
HIGHRubyGems
GHSA-r8fh-hq2p-7qhq· CVE-2014-3483Active Record contains SQL Injection via improper range quoting
Modified: 11/29/2024
HIGHRubyGems
GHSA-xf96-32q2-9rw2· CVE-2008-4094Rails ActiveRecord gem vulnerable to SQL injection
Modified: 12/7/2024
MEDIUM5.3RubyGems
GHSA-xrr6-3pc4-m447· CVE-2015-7577Active Record Improper Access Control
Modified: 2/16/2024