Security
فارسی
All products

actionpack

RubyGems · Package
69 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Action Pack: Possible DoS vulnerability in Action Controller Live streamingCVE-2026-126072 · GHSA-RWVH-FW6R-PWVP actionpack RubyGems Medium Fix reported
Action Pack: Possible sensitive session information leak in Active Storage proxy modeCVE-2026-126077 · GHSA-X6MJ-8JX9-QHQV actionpack RubyGems Medium Fix reported
Action Pack: Possible Strong Parameters Bypass in Parameters#each_keyCVE-2026-126081 · GHSA-WM3X-V3QW-4JH3 actionpack RubyGems High Fix reported
Action Pack: Possible cache poisoning in Action Pack content negotiationCVE-2026-126073 · GHSA-R9JG-FMFX-2GV6 Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 Red HatRubyGems Medium Fix reported
Action Pack: Missing SameSite attribute on session cookies from Action Pack session storesCVE-2026-126067 · GHSA-GMJ8-HVJ3-49MW Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 Red HatRubyGems Low Fix reported
Action Pack: Possible IP spoofing in Action Dispatch RemoteIpCVE-2026-126083 · GHSA-2GFF-2MMG-M73P actionpack RubyGems High Fix reported
Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStoreCVE-2026-126076 · GHSA-2586-8GHR-69FJ Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 Red HatRubyGems Medium Fix reported
Rails has a possible XSS vulnerability in its Action Pack debug exceptionsCVE-2026-33167 · GHSA-PGM4-439C-5JP6 Red Hat Satellite 6/rubygem-actionpackRed Hat Satellite 6/satellite:el8/rubygem-actionpack Red HatRubyGems Low Fix reported
Ability to forge per-form CSRF tokens in RailsCVE-2020-8166 · GHSA-JP5V-5GX4-JMJ9 CloudForms Management Engine 5/cfme-gemsetactionpack Red HatRubyGems Medium Fix reported
Rails has possible ReDoS vulnerability in Accept header parsing in Action DispatchCVE-2024-26142 · GHSA-JJHX-JHVP-74WQ Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7actionpack Red HatRubyGems Low Fix reported
Rails has possible XSS Vulnerability in Action ControllerCVE-2024-26143 · GHSA-9822-6M93-XQF4 Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7actionpack Red HatRubyGems Medium Fix reported
Exposure of information in Action PackCVE-2022-23633 · GHSA-WH98-P28R-VRC9 actionpack RubyGems High Fix reported
actionpack Path Traversal vulnerabilityCVE-2014-0130 · GHSA-6X85-J5J2-27JX OpenShift Enterprise 1/ruby193-rubygem-actionpackRed Hat OpenStack Platform 3/ruby193-rubygem-actionpack Red HatRubyGems High Fix reported
Directory traversal vulnerability in Action View in Ruby on RailsCVE-2016-0752 · GHSA-XRR4-P6FQ-HJG7 CloudForms Management Engine 5/ruby193-rubygem-actionpackRed Hat Subscription Asset Manager/ruby193-rubygem-actionpack Red HatRubyGems High Fix reported
Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_toCVE-2023-28362 · GHSA-4G8V-VG43-WPGF Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8 Red HatRubyGems Medium Fix reported
Cross site scripting that affects railsCVE-2009-3009 · GHSA-8QRH-H9M2-5FVF actionpackactivesupport RubyGems Medium Fix reported
ReDoS based DoS vulnerability in Action DispatchCVE-2023-22795 · GHSA-8XWW-X3G3-6JCV Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8actionpack Red HatRubyGems Low Fix reported
Possible Content Security Policy bypass in Action DispatchCVE-2024-54133 · GHSA-VFM5-RMRH-J26V Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8 Red HatRubyGems Low Fix reported
ReDoS based DoS vulnerability in Action DispatchCVE-2023-22792 · GHSA-P84V-45XJ-WWQJ Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8actionpack Red HatRubyGems Low Fix reported
actionpack Improper Authentication vulnerabilityCVE-2012-3424 · GHSA-92W9-2PQW-RHJJ actionpack RubyGems Medium Fix reported