Security
فارسی
All products

activesupport

RubyGems · Package
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Active Support: Possible DoS vulnerability in Active Support safe_constantizeCVE-2026-126080 · GHSA-8474-XRP6-WH69 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 Red HatRubyGems High Fix reported
Active Support: Possible XSS vulnerability in Active Support MessagePack serializerCVE-2026-126075 · GHSA-2W9F-FXWJ-W2QF activesupport RubyGems Medium Fix reported
Rails Active Support has a possible XSS vulnerability in SafeBuffer#%CVE-2026-33170 · GHSA-89VF-4333-QX8V Red Hat Satellite 6/rubygem-activesupportRed Hat Satellite 6/satellite:el8/rubygem-activesupport Red HatRubyGems Medium Fix reported
Rails Active Support has a possible ReDoS vulnerability in number_to_delimitedCVE-2026-33169 · GHSA-CG4J-Q9V8-6V38 Red Hat Satellite 6/rubygem-activesupportRed Hat Satellite 6/satellite:el8/rubygem-activesupport Red HatRubyGems Medium Fix reported
Rails Active Support has a possible DoS vulnerability in its number helpersCVE-2026-33176 · GHSA-2J26-FRM8-CMJ9 Red Hat Satellite 6/satellite:el8/rubygem-activesupportactivesupport Red HatRubyGems Medium Fix reported
Active Support Possibly Discloses Locally Encrypted FilesCVE-2023-38037 · GHSA-CR5Q-6Q9F-RQ6Q Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat Satellite 6/tfm-rubygem-activesupport Red HatRubyGems Medium Fix reported
activesupport Cross-site Scripting vulnerabilityCVE-2015-3226 · GHSA-VXVP-4XWC-JPP6 CloudForms Management Engine 5/ruby193-rubygem-activesupportRed Hat Software Collections/rh-ror41-rubygem-activesupport Red HatRubyGems Medium Fix reported
ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStoreCVE-2020-8165 · GHSA-2P68-F74V-9WC6 CloudForms Management Engine 5/cfme-gemsetRed Hat 3scale API Management Platform 2/system Red HatRubyGems Critical Fix reported
Cross site scripting that affects railsCVE-2009-3009 · GHSA-8QRH-H9M2-5FVF actionpackactivesupport RubyGems Medium Fix reported
activesupport vulnerable to Denial of Service via large XML document depthCVE-2015-3227 · GHSA-J96R-XVJQ-R9PG CloudForms Management Engine 5/ruby193-rubygem-activesupportRed Hat Software Collections/rh-ror41-rubygem-activesupport Red HatRubyGems Medium Fix reported
ReDoS based DoS vulnerability in Active Support's underscoreCVE-2023-22796 · GHSA-J6GC-792M-QGM2 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8activesupport Red HatRubyGems Low Fix reported
activesupport Cross-site Scripting vulnerabilityCVE-2012-3464 · GHSA-H835-75HW-PJ89 activesupport RubyGems Medium Fix reported
Possible XSS Security Vulnerability in SafeBuffer#bytespliceCVE-2023-28120 · GHSA-PJ73-V5MW-PM9J Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/toolbox-rhel8 Red HatRubyGems Medium Fix reported
rails Cross-site Scripting vulnerabilityCVE-2011-2197 · GHSA-V9V4-7JP6-8C73 actionpackactivesupport RubyGems Medium Fix reported
activesupport Improper Input Validation vulnerabilityCVE-2013-1856 · GHSA-9C2J-593Q-3G82 activesupport RubyGems Medium Fix reported
activesupport Cross-site Scripting vulnerabilityCVE-2012-1098 · GHSA-QV8P-V9QW-WC7G Red Hat Subscription Asset Manager/rubygem-activesupportactivesupport Red HatRubyGems Medium Fix reported
activesupport in Rails vulnerable to incorrect data conversionCVE-2013-0333 · GHSA-XGR2-V94M-RC9G activesupport RubyGems High Fix reported
activesupport Cross-site Scripting vulnerabilityCVE-2011-2932 · GHSA-9FH3-VH3H-Q4G3 activesupport RubyGems Medium Fix reported
actionpack and activesupport vulnerable to information leaksCVE-2009-3086 · GHSA-FG9W-G6M4-557J actionpackactivesupport RubyGems Medium Fix reported