MEDIUM6.1RubyGems
GHSA-9822-6m93-xqf4· BIT-rails-2024-26143, CVE-2024-26143Rails has possible XSS Vulnerability in Action Controller
Modified: 6/8/2026
package
RubyGems/rails
pkg:rubygems/rails
MEDIUMRubyGems
GHSA-9p3v-wf2w-v29c· CVE-2009-4214Moderate severity vulnerability that affects rails
Modified: 4/9/2025
HIGHRubyGems
GHSA-9wrq-xvmp-xjc8· CVE-2006-4112Rails Denial of Service vulnerability
Modified: 4/3/2025
MEDIUMRubyGems
GHSA-fjfg-q662-gm6j· CVE-2007-5379Moderate severity vulnerability that affects rails
Modified: 5/1/2025
MEDIUMRubyGems
GHSA-gm25-fpmr-43fj· CVE-2007-3227Moderate severity vulnerability that affects rails
Modified: 4/9/2025
MEDIUMRubyGems
GHSA-jmgf-p46x-982h· CVE-2008-5189rails is vulnerable to CRLF injection
Modified: 4/9/2025
MEDIUMRubyGems
GHSA-jwhv-rgqc-fqj5· CVE-2007-5380Session fixation vulnerability in Rails
Modified: 4/9/2025
MEDIUMRubyGems
GHSA-m46p-ggm5-5j83· CVE-2014-0081Rails vulnerable to Cross-site Scripting
Modified: 12/8/2024
MEDIUMRubyGems
GHSA-p4c6-77gc-694x· CVE-2007-6077session fixation protection mechanism in cgi_process.rb in Rails
Modified: 4/9/2025
HIGHRubyGems
GHSA-rvpq-5xqx-pfpp· CVE-2006-4111Ruby on Rails vulnerable to code injection
Modified: 4/3/2025
CRITICAL9.8RubyGems
GHSA-rxq3-gm4p-5fj4· CVE-2009-2422rails vulnerable to improper authentication
Modified: 2/16/2024