MEDIUM RubyGems
GHSA-2j26-frm8-cmj9 · CVE-2026-33176 Rails Active Support has a possible DoS vulnerability in its number helpers
Modified: 5/13/2026
package
RubyGems / activesupport
pkg:rubygems/activesupport
CRITICAL 9.8 RubyGems
GHSA-2p68-f74v-9wc6 · CVE-2020-8165 ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore
Modified: 5/9/2025
MEDIUM RubyGems
GHSA-89vf-4333-qx8v · CVE-2026-33170 Rails Active Support has a possible XSS vulnerability in SafeBuffer#%
Modified: 5/13/2026
MEDIUM RubyGems
GHSA-8qrh-h9m2-5fvf · CVE-2009-3009 Cross site scripting that affects rails
Modified: 4/9/2025
MEDIUM RubyGems
GHSA-9c2j-593q-3g82 · CVE-2013-1856 activesupport Improper Input Validation vulnerability
Modified: 12/5/2024
MEDIUM RubyGems
GHSA-9fh3-vh3h-q4g3 · CVE-2011-2932 activesupport Cross-site Scripting vulnerability
Modified: 11/29/2024
MEDIUM RubyGems
GHSA-cg4j-q9v8-6v38 · CVE-2026-33169 Rails Active Support has a possible ReDoS vulnerability in number_to_delimited
Modified: 5/13/2026
MEDIUM 5.5 RubyGems
GHSA-cr5q-6q9f-rq6q · CVE-2023-38037 Active Support Possibly Discloses Locally Encrypted Files
Modified: 2/4/2026
MEDIUM RubyGems
GHSA-fg9w-g6m4-557j · CVE-2009-3086 actionpack and activesupport vulnerable to information leaks
Modified: 11/28/2024
MEDIUM RubyGems
GHSA-h835-75hw-pj89 · CVE-2012-3464 activesupport Cross-site Scripting vulnerability
Modified: 1/21/2025
LOW RubyGems
GHSA-j6gc-792m-qgm2 · CVE-2023-22796 ReDoS based DoS vulnerability in Active Support's underscore
Modified: 2/18/2025
MEDIUM RubyGems
GHSA-j96r-xvjq-r9pg · CVE-2015-3227 activesupport vulnerable to Denial of Service via large XML document depth
Modified: 3/31/2025
MEDIUM 5.3 RubyGems
GHSA-pj73-v5mw-pm9j · CVE-2023-28120 Possible XSS Security Vulnerability in SafeBuffer#bytesplice
Modified: 1/10/2025
MEDIUM RubyGems
GHSA-qv8p-v9qw-wc7g · CVE-2012-1098 activesupport Cross-site Scripting vulnerability
Modified: 11/30/2024
MEDIUM RubyGems
GHSA-v9v4-7jp6-8c73 · CVE-2011-2197 rails Cross-site Scripting vulnerability
Modified: 12/7/2024
MEDIUM RubyGems
GHSA-vxvp-4xwc-jpp6 · CVE-2015-3226 activesupport Cross-site Scripting vulnerability
Modified: 11/4/2025
HIGH RubyGems
GHSA-xgr2-v94m-rc9g · CVE-2013-0333 activesupport in Rails vulnerable to incorrect data conversion
Modified: 11/29/2024