Search CVE reports


Toggle filters

1 – 10 of 148 results


CVE-2024-54133

Medium priority
Needs evaluation

Action Pack is a framework for handling and responding to web requests. There is a possible Cross Site Scripting (XSS) vulnerability in the `content_security_policy` helper starting in version 5.2.0 of Action Pack and prior to...

1 affected package

rails

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rails Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-53989

Medium priority
Needs evaluation

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0. A possible...

1 affected package

ruby-rails-html-sanitizer

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
ruby-rails-html-sanitizer Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-53988

Medium priority
Needs evaluation

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0. A possible...

1 affected package

ruby-rails-html-sanitizer

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
ruby-rails-html-sanitizer Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-53987

Medium priority
Needs evaluation

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0. A possible...

1 affected package

ruby-rails-html-sanitizer

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
ruby-rails-html-sanitizer Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-53986

Medium priority
Needs evaluation

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0. A possible...

1 affected package

ruby-rails-html-sanitizer

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
ruby-rails-html-sanitizer Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-53985

Medium priority
Needs evaluation

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0 and Nokogiri...

1 affected package

ruby-rails-html-sanitizer

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
ruby-rails-html-sanitizer Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-47889

Medium priority

Some fixes available 4 of 7

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the block_format helper in Action...

1 affected package

rails

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rails Needs evaluation Fixed Fixed Fixed
Show less packages

CVE-2024-47888

Medium priority

Some fixes available 4 of 7

Action Text brings rich text content and editing to Rails. Starting in version 6.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the `plain_text_for_blockquote_node...

1 affected package

rails

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rails Needs evaluation Fixed Fixed Fixed
Show less packages

CVE-2024-47887

Medium priority

Some fixes available 4 of 7

Action Pack is a framework for handling and responding to web requests. Starting in version 4.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in Action Controller's HTTP...

1 affected package

rails

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rails Needs evaluation Fixed Fixed Fixed
Show less packages

CVE-2024-41128

Medium priority

Some fixes available 4 of 7

Action Pack is a framework for handling and responding to web requests. Starting in version 3.1.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the query...

1 affected package

rails

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rails Needs evaluation Fixed Fixed Fixed
Show less packages