Security
فارسی
All products

activerecord

RubyGems · Package
23 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Active Record logging vulnerable to ANSI escape injectionCVE-2025-55193 · GHSA-76R7-HHXJ-R776 Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel9 Red HatRubyGems Medium Fix reported
Active Record RCE bug with Serialized ColumnsCVE-2022-32224 · GHSA-3HHC-QP5V-9P2J activerecord RubyGems Critical Fix reported
Active Record component in Ruby on Rails has a data-type injection vulnerabilityCVE-2013-3221 · GHSA-F57C-HX33-HVH8 activerecord RubyGems Critical Fix reported
Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapterCVE-2022-44566 · GHSA-579W-22J4-4749 activerecord RubyGems High Fix reported
activerecord vulnerable to SQL InjectionCVE-2011-2930 · GHSA-H6W6-XMQV-7Q78 activerecord RubyGems High Fix reported
SQL Injection in Active RecordCVE-2014-3482 · GHSA-MHWP-QHPC-H3JM OpenShift Enterprise 1/ruby193-rubygem-activerecordRed Hat OpenStack Platform 3/ruby193-rubygem-activerecord Red HatRubyGems High Fix reported
Active Record contains SQL InjectionCVE-2012-6496 · GHSA-GH2W-J7CX-2664 OpenShift Enterprise 1/ruby-rubygem-activerecordactiverecord Red HatRubyGems High Fix reported
activerecord vulnerable to SQL InjectionCVE-2012-2695 · GHSA-76WQ-XW4H-F8WJ activerecord RubyGems High Fix reported
Array data injection vulnerability in activerecordCVE-2014-0080 · GHSA-HQF9-RC9J-5FMJ activerecord RubyGems Medium Fix reported
Rails activerecord gem has Improper Input Validation vulnerabilityCVE-2010-3933 · GHSA-GJXW-5W2Q-7GRF activerecord RubyGems Medium Fix reported
Rails ActiveRecord gem vulnerable to SQL injectionCVE-2008-4094 · GHSA-XF96-32Q2-9RW2 activerecord RubyGems High Fix reported
Active Record vulnerable to SQL Injection via nested query parametersCVE-2012-2661 · GHSA-FH39-V733-MXFR activerecord RubyGems Medium Fix reported
Active Record contains deserialization of arbitrary YAMLCVE-2013-0277 · GHSA-FHJ9-CJJH-27VM OpenShift Enterprise 1/rubygem-activesupportRed Hat Subscription Asset Manager/rubygem-activesupport Red HatRubyGems Critical Fix reported
Active Record subject to strong parameters protection bypassCVE-2014-3514 · GHSA-9RF5-JM6F-2FMM activerecord RubyGems High Fix reported
Active Record Improper Input ValidationCVE-2013-1854 · GHSA-3CRR-9VMG-864V Red Hat Satellite 6/ruby193-rubygem-activerecordRed Hat Subscription Asset Manager/rubygem-activerecord Red HatRubyGems Medium Fix reported
ActiveRecord vulnerable to modification of protected model attributesCVE-2013-0276 · GHSA-GR44-7GRC-37VQ activerecord RubyGems Medium Fix reported
Active Record allows bypassing of database-query restrictionsCVE-2013-0155 · GHSA-GPPP-5XC5-WFPX activerecord RubyGems Medium Fix reported
Active Record contains SQL Injection via improper range quotingCVE-2014-3483 · GHSA-R8FH-HQ2P-7QHQ activerecord RubyGems High Fix reported
activerecord vulnerable to SQL InjectionCVE-2011-0448 · GHSA-JMM9-2P29-VH2W activerecord RubyGems High Fix reported
SQL Injection Vulnerability via ActiveRecord commentsCVE-2023-22794 · GHSA-HQ7P-J377-6V63 activerecord RubyGems High Fix reported