All products

Red Hat Satellite 6/rubygem-actionpack

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Action Pack: Possible cache poisoning in Action Pack content negotiationCVE-2026-126073 · GHSA-R9JG-FMFX-2GV6 Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 Red HatRubyGems Medium Fix reported
Action Pack: Missing SameSite attribute on session cookies from Action Pack session storesCVE-2026-126067 · GHSA-GMJ8-HVJ3-49MW Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 Red HatRubyGems Low Fix reported
Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStoreCVE-2026-126076 · GHSA-2586-8GHR-69FJ Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 Red HatRubyGems Medium Fix reported
Rails has a possible XSS vulnerability in its Action Pack debug exceptionsCVE-2026-33167 · GHSA-PGM4-439C-5JP6 Red Hat Satellite 6/rubygem-actionpackRed Hat Satellite 6/satellite:el8/rubygem-actionpack Red HatRubyGems Low Fix reported
Possible Content Security Policy bypass in Action DispatchCVE-2024-54133 · GHSA-VFM5-RMRH-J26V Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8 Red HatRubyGems Low Fix reported
Missing security headers in Action Pack on non-HTML responsesCVE-2024-28103 · GHSA-FWHR-88QX-H9G7 Red Hat Satellite 6/rubygem-actionpackRed Hat Satellite 6/satellite:el8/rubygem-actionpack Red HatRubyGems Medium Fix reported
Possible ReDoS vulnerability in HTTP Token authentication in Action ControllerCVE-2024-47887 · GHSA-VFG9-R3FQ-JVX4 Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7Red Hat Satellite 6/rubygem-actionpack Red HatRubyGems Medium Fix reported
Possible ReDoS vulnerability in query parameter filtering in Action DispatchCVE-2024-41128 · GHSA-X76W-6VJR-8XGJ Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7Red Hat Satellite 6/rubygem-actionpack Red HatRubyGems Medium Fix reported
Open Redirect in ActionPackCVE-2021-22942 · GHSA-2RQW-V265-JF8C Red Hat Satellite 6/rubygem-actionpackactionpack Red HatRubyGems Medium Fix reported