MEDIUM4.7RubyGems
GHSA-7g26-2qgj-chfg· CVE-2026-44587CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters
Modified: 7/8/2026
package
RubyGems/carrierwave
pkg:rubygems/carrierwave
HIGH7.4RubyGems
GHSA-cf3w-g86h-35x4· CVE-2021-21305Code Injection vulnerability in CarrierWave::RMagick
Modified: 7/8/2026
MEDIUM4.3RubyGems
GHSA-fwcm-636p-68r5· CVE-2021-21288Server-side request forgery in CarrierWave
Modified: 9/10/2026
MEDIUM6.8RubyGems
GHSA-gxhx-g4fq-49hj· CVE-2023-49090CarrierWave Content-Type allowlist bypass vulnerability, possibly leading to XSS
Modified: 11/29/2023
MEDIUM6.8RubyGems
GHSA-vfmv-jfc5-pjjw· CVE-2024-29034CarrierWave content-Type allowlist bypass vulnerability which possibly leads to XSS remained
Modified: 3/27/2024