Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Satellite 6/rubygem-actionpack
Red Hat
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Action Pack: Possible cache poisoning in Action Pack content negotiation
CVE-2026-126073 · GHSA-R9JG-FMFX-2GV6
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9
Red Hat
RubyGems
Medium
Fix reported
2026-11-11
Action Pack: Missing SameSite attribute on session cookies from Action Pack session stores
CVE-2026-126067 · GHSA-GMJ8-HVJ3-49MW
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9
Red Hat
RubyGems
Low
Fix reported
2026-11-11
Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStore
CVE-2026-126076 · GHSA-2586-8GHR-69FJ
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9
Red Hat
RubyGems
Medium
Fix reported
2026-11-11
Rails has a possible XSS vulnerability in its Action Pack debug exceptions
CVE-2026-33167 · GHSA-PGM4-439C-5JP6
Red Hat Satellite 6/rubygem-actionpack
Red Hat Satellite 6/satellite:el8/rubygem-actionpack
Red Hat
RubyGems
Low
Fix reported
2026-09-10
Possible Content Security Policy bypass in Action Dispatch
CVE-2024-54133 · GHSA-VFM5-RMRH-J26V
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7
Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8
Red Hat
RubyGems
Low
Fix reported
2025-03-07
Missing security headers in Action Pack on non-HTML responses
CVE-2024-28103 · GHSA-FWHR-88QX-H9G7
Red Hat Satellite 6/rubygem-actionpack
Red Hat Satellite 6/satellite:el8/rubygem-actionpack
Red Hat
RubyGems
Medium
Fix reported
2024-12-06
Possible ReDoS vulnerability in HTTP Token authentication in Action Controller
CVE-2024-47887 · GHSA-VFG9-R3FQ-JVX4
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7
Red Hat Satellite 6/rubygem-actionpack
Red Hat
RubyGems
Medium
Fix reported
2024-10-31
Possible ReDoS vulnerability in query parameter filtering in Action Dispatch
CVE-2024-41128 · GHSA-X76W-6VJR-8XGJ
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7
Red Hat Satellite 6/rubygem-actionpack
Red Hat
RubyGems
Medium
Fix reported
2024-10-16
Open Redirect in ActionPack
CVE-2021-22942 · GHSA-2RQW-V265-JF8C
Red Hat Satellite 6/rubygem-actionpack
actionpack
Red Hat
RubyGems
Medium
Fix reported
2024-02-21