Possible XSS Vulnerability in Action Pack

There is a possible XSS vulnerability in Rails / Action Pack. This vulnerability has been assigned the CVE identifier CVE-2022-22577. Versions Affected: = 5.2.0 Not affected: 5.2.0 Fixed Versions: 7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1 Impact CSP headers were only sent along with responses that Rails...

Rails -- XSS vulnerabilities

Ruby on Rails blog: This is an announcement to let you know that Rails 7.0.2.4, 6.1.5.1, 6.0.4.8, and 5.2.7.1 have been released! These are security releases so please update as soon as you can. Once again we've made these releases based on the last release tag, so hopefully upgrading will go...

CVE-2026-22577

...

CVE-2026-22577

CVE-2026-22577 is connected to an entry titled “Apache HTTP Server Cross-Site Request Forgery.” The PT-2026-2207 document provides a concrete product (Apache HTTP Server) and vulnerability type (CSRF) but does not provide explicit root-cause, affected versions, exploit details, or a remediation i...