carrierwave
RubyGems · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Server-side request forgery in CarrierWave | carrierwave | RubyGems | Medium | Fix reported | |
| CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters | carrierwave | RubyGems | Medium | Fix reported | |
| Code Injection vulnerability in CarrierWave::RMagick | carrierwave | RubyGems | High | Fix reported | |
| CarrierWave content-Type allowlist bypass vulnerability which possibly leads to XSS remained | carrierwave | RubyGems | Medium | Fix reported | |
| CarrierWave Content-Type allowlist bypass vulnerability, possibly leading to XSS | carrierwave | RubyGems | Medium | Fix reported |