| Active Storage: Possible arbitrary file read and remote code execution in video previews, analysis and image processingCVE-2026-126186 · GHSA-V924-7RP8-4MXH |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Active Storage: Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud StorageCVE-2026-126085 · GHSA-HFR4-8RJC-97M2 |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Active Support: Possible DoS vulnerability in Active Support safe_constantizeCVE-2026-126080 · GHSA-8474-XRP6-WH69 |
Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Active Storage: Possible DoS vulnerability in Active Storage filename handlingCVE-2026-126074 · GHSA-P2PM-G2H6-7J5J |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Action Mailbox: Possible signature replay in Action Mailbox Mailgun ingressCVE-2026-126068 · GHSA-5957-C7QM-M469 |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
کم
|
اصلاح گزارش شده |
|
| Action Pack: Possible cache poisoning in Action Pack content negotiationCVE-2026-126073 · GHSA-R9JG-FMFX-2GV6 |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Action Pack: Missing SameSite attribute on session cookies from Action Pack session storesCVE-2026-126067 · GHSA-GMJ8-HVJ3-49MW |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
کم
|
اصلاح گزارش شده |
|
| Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStoreCVE-2026-126076 · GHSA-2586-8GHR-69FJ |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| JRuby: NONET is bypassed for external DTDs and entities when the systemId uses a short-form IPv4 hostCVE-2026-126062 · GHSA-V995-44V6-5FQM |
Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 |
Red HatRubyGems |
کم
|
اصلاح گزارش شده |
|
| Nokogiri: Use-After-Free in Nokogiri when replacing an attribute valueCVE-2026-126064 · GHSA-3W22-6JFG-527W |
Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 |
Red HatRubyGems |
کم
|
اصلاح گزارش شده |
|
| Rack: Multipart boundary ambiguity guard in Rack::Multipart::Parser can be bypassed with a quoted boundary value, allowing WAF bypassCVE-2026-125108 · GHSA-P8X9-V4HV-2W4G |
Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 |
Red HatRubyGems |
کم
|
اصلاح گزارش شده |
|
| Rack: Rack::Static header_rules bypass via dot-segment normalization mismatchCVE-2026-125110 · GHSA-WVG4-6P58-3GH3 |
Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Crass: A large number of adjacent CSS comments can trigger a SystemStackErrorCVE-2026-61847 · GHSA-WWPR-JFF3-395C |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel9 |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usageCVE-2026-61846 · GHSA-6JXJ-PX6V-747W |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Crass: Non-ASCII characters cause superlinear CPU consumptionCVE-2026-61848 · GHSA-8VFG-2R28-HVHJ |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Crass : Large numeric exponents cause CPU and memory denial of serviceCVE-2026-61845 · GHSA-6WMF-3R64-VCWV |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel9 |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Denial of service in github.com/shamaton/msgpackCVE-2026-32284 · GHSA-H9Q6-HC68-35RPبازه‌ها نیاز به بررسی دارند. |
github.com/shamaton/msgpack/v2github.com/shamaton/msgpack/v3 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Rails HTML Sanitizers: Possible XSS vulnerability with certain configurationsCVE-2026-73648 · GHSA-CJ75-F6XR-R4G7 |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character referencesCVE-2026-73491 · GHSA-8WHX-365G-H9VV |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel9 |
Red HatRubyGems |
کم
|
اصلاح گزارش شده |
|
| Loofah: SVG `href` attribute bypasses local-reference restrictionCVE-2026-73490 · GHSA-9WJQ-CP2P-HRGF |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
